Search criteria
6 vulnerabilities found for zonedirector_firmware by ruckuswireless
CVE-2023-49225 (GCVE-0-2023-49225)
Vulnerability from nvd – Published: 2023-12-07 06:22 – Updated: 2025-05-28 13:58
VLAI?
Summary
A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo). If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in the product. As for the affected products/models/versions, see the information provided by the vendor listed under [References] section or the list under [Product Status] section.
Severity ?
6.1 (Medium)
CWE
- Cross-site scripting (XSS)
Assigner
References
Impacted products
| Vendor | Product | Version | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| CommScope, Inc. | ZoneDirector |
Affected:
10.5.1 and earlier
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T21:53:45.350Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://support.ruckuswireless.com/security_bulletins/323"
},
{
"tags": [
"x_transferred"
],
"url": "https://jvn.jp/en/jp/JVN45891816/"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2023-49225",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-05-28T13:53:26.065683Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-05-28T13:58:41.326Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "ZoneDirector",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "10.5.1 and earlier "
}
]
},
{
"product": "SmartZone",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "6.1.1 and earlier "
}
]
},
{
"product": "AP Solo R750",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo R650",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo R730",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo T750",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo R550",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.5585 and earlier "
}
]
},
{
"product": "AP Solo R850",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.5585 and earlier "
}
]
},
{
"product": "AP Solo T750SE",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.5585 and earlier "
}
]
},
{
"product": "AP Solo R510",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo T310D",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo E510",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo C110",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo R320",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo H510",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo H320",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo T310S",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo T310N",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo T310C",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo T305",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo M510",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo R720",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo R710",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo T710",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo T710s",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo T610",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo T610s",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo R610",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo R310",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "110.0.0.0.2014 and earlier "
}
]
},
{
"product": "AP Solo R760",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "118.1.0.0.1274 and earlier "
}
]
},
{
"product": "AP Solo R560",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "118.1.0.0.1908 and earlier "
}
]
},
{
"product": "AP Solo H550",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "116.0.0.0.1506 and earlier "
}
]
},
{
"product": "AP Solo H350",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "116.0.0.0.3128 and earlier "
}
]
},
{
"product": "AP Solo T350c",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "116.0.0.0.1543 and earlier "
}
]
},
{
"product": "AP Solo T350d",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "116.0.0.0.1543 and earlier "
}
]
},
{
"product": "AP Solo T350se",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "116.0.0.0.3136 and earlier "
}
]
},
{
"product": "AP Solo R350",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "116.0.0.0.1655 and earlier "
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo). If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in the product. As for the affected products/models/versions, see the information provided by the vendor listed under [References] section or the list under [Product Status] section."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Cross-site scripting (XSS)",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-12-07T06:22:32.328Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://support.ruckuswireless.com/security_bulletins/323"
},
{
"url": "https://jvn.jp/en/jp/JVN45891816/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2023-49225",
"datePublished": "2023-12-07T06:22:32.328Z",
"dateReserved": "2023-11-24T00:19:52.591Z",
"dateUpdated": "2025-05-28T13:58:41.326Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2020-21161 (GCVE-0-2020-21161)
Vulnerability from nvd – Published: 2022-06-27 14:56 – Updated: 2024-08-04 14:22
VLAI?
Summary
Cross Site Scripting (XSS) vulnerability in Ruckus Wireless ZoneDirector 9.8.3.0.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T14:22:25.581Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://ruckus.com"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://zonedirector.com"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://dollahibrahim.blogspot.com/2019/11/cross-site-scripting-on-ruckus.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Cross Site Scripting (XSS) vulnerability in Ruckus Wireless ZoneDirector 9.8.3.0."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-06-27T14:56:39",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "http://ruckus.com"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://zonedirector.com"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://dollahibrahim.blogspot.com/2019/11/cross-site-scripting-on-ruckus.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2020-21161",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Cross Site Scripting (XSS) vulnerability in Ruckus Wireless ZoneDirector 9.8.3.0."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://ruckus.com",
"refsource": "MISC",
"url": "http://ruckus.com"
},
{
"name": "http://zonedirector.com",
"refsource": "MISC",
"url": "http://zonedirector.com"
},
{
"name": "https://dollahibrahim.blogspot.com/2019/11/cross-site-scripting-on-ruckus.html",
"refsource": "MISC",
"url": "https://dollahibrahim.blogspot.com/2019/11/cross-site-scripting-on-ruckus.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2020-21161",
"datePublished": "2022-06-27T14:56:39",
"dateReserved": "2020-08-13T00:00:00",
"dateUpdated": "2024-08-04T14:22:25.581Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-6224 (GCVE-0-2017-6224)
Vulnerability from nvd – Published: 2017-10-13 17:00 – Updated: 2024-09-16 18:34
VLAI?
Summary
Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x (less than 10.0.1.0.17 MR1 release) and Ruckus Wireless Unleashed AP Firmware releases 200.0.x, 200.1.x, 200.2.x, 200.3.x, 200.4.x. contain OS Command Injection vulnerabilities that could allow local authenticated users to execute arbitrary privileged commands on the underlying operating system by appending those commands in the Common Name field in the Certificate Generation Request.
Severity ?
No CVSS data available.
CWE
- Authenticated Root Command Injection.
Assigner
References
| URL | Tags | ||||
|---|---|---|---|---|---|
|
|||||
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Brocade Communications Systems, Inc. | Zone Director Controller and Unleashed AP Firmware |
Affected:
ZD9.x
Affected: ZD10.0.0.x Affected: ZD10.0.1.x Affected: 200.x Affected: 200.2.x Affected: 200.3.x Affected: 200.4.x |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T15:25:49.092Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-092917.txt"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Zone Director Controller and Unleashed AP Firmware",
"vendor": "Brocade Communications Systems, Inc.",
"versions": [
{
"status": "affected",
"version": "ZD9.x"
},
{
"status": "affected",
"version": "ZD10.0.0.x"
},
{
"status": "affected",
"version": "ZD10.0.1.x"
},
{
"status": "affected",
"version": "200.x"
},
{
"status": "affected",
"version": "200.2.x"
},
{
"status": "affected",
"version": "200.3.x"
},
{
"status": "affected",
"version": "200.4.x"
}
]
}
],
"datePublic": "2017-09-27T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x (less than 10.0.1.0.17 MR1 release) and Ruckus Wireless Unleashed AP Firmware releases 200.0.x, 200.1.x, 200.2.x, 200.3.x, 200.4.x. contain OS Command Injection vulnerabilities that could allow local authenticated users to execute arbitrary privileged commands on the underlying operating system by appending those commands in the Common Name field in the Certificate Generation Request."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Authenticated Root Command Injection.",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-10-13T16:57:01",
"orgId": "87b297d7-335e-4844-9551-11b97995a791",
"shortName": "brocade"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-092917.txt"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "sirt@brocade.com",
"DATE_PUBLIC": "2017-09-27T00:00:00",
"ID": "CVE-2017-6224",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Zone Director Controller and Unleashed AP Firmware",
"version": {
"version_data": [
{
"version_value": "ZD9.x"
},
{
"version_value": "ZD10.0.0.x"
},
{
"version_value": "ZD10.0.1.x"
},
{
"version_value": "200.x"
},
{
"version_value": "200.2.x"
},
{
"version_value": "200.3.x"
},
{
"version_value": "200.4.x"
}
]
}
}
]
},
"vendor_name": "Brocade Communications Systems, Inc."
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x (less than 10.0.1.0.17 MR1 release) and Ruckus Wireless Unleashed AP Firmware releases 200.0.x, 200.1.x, 200.2.x, 200.3.x, 200.4.x. contain OS Command Injection vulnerabilities that could allow local authenticated users to execute arbitrary privileged commands on the underlying operating system by appending those commands in the Common Name field in the Certificate Generation Request."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Authenticated Root Command Injection."
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-092917.txt",
"refsource": "CONFIRM",
"url": "https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-092917.txt"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "87b297d7-335e-4844-9551-11b97995a791",
"assignerShortName": "brocade",
"cveId": "CVE-2017-6224",
"datePublished": "2017-10-13T17:00:00Z",
"dateReserved": "2017-02-23T00:00:00",
"dateUpdated": "2024-09-16T18:34:15.776Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-49225 (GCVE-0-2023-49225)
Vulnerability from cvelistv5 – Published: 2023-12-07 06:22 – Updated: 2025-05-28 13:58
VLAI?
Summary
A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo). If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in the product. As for the affected products/models/versions, see the information provided by the vendor listed under [References] section or the list under [Product Status] section.
Severity ?
6.1 (Medium)
CWE
- Cross-site scripting (XSS)
Assigner
References
Impacted products
| Vendor | Product | Version | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| CommScope, Inc. | ZoneDirector |
Affected:
10.5.1 and earlier
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T21:53:45.350Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://support.ruckuswireless.com/security_bulletins/323"
},
{
"tags": [
"x_transferred"
],
"url": "https://jvn.jp/en/jp/JVN45891816/"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2023-49225",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-05-28T13:53:26.065683Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-05-28T13:58:41.326Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "ZoneDirector",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "10.5.1 and earlier "
}
]
},
{
"product": "SmartZone",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "6.1.1 and earlier "
}
]
},
{
"product": "AP Solo R750",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo R650",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo R730",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo T750",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo R550",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.5585 and earlier "
}
]
},
{
"product": "AP Solo R850",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.5585 and earlier "
}
]
},
{
"product": "AP Solo T750SE",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.5585 and earlier "
}
]
},
{
"product": "AP Solo R510",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo T310D",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo E510",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo C110",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo R320",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo H510",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo H320",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo T310S",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo T310N",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo T310C",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo T305",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo M510",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo R720",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo R710",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo T710",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo T710s",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo T610",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo T610s",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo R610",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "114.0.0.0.6565 and earlier "
}
]
},
{
"product": "AP Solo R310",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "110.0.0.0.2014 and earlier "
}
]
},
{
"product": "AP Solo R760",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "118.1.0.0.1274 and earlier "
}
]
},
{
"product": "AP Solo R560",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "118.1.0.0.1908 and earlier "
}
]
},
{
"product": "AP Solo H550",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "116.0.0.0.1506 and earlier "
}
]
},
{
"product": "AP Solo H350",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "116.0.0.0.3128 and earlier "
}
]
},
{
"product": "AP Solo T350c",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "116.0.0.0.1543 and earlier "
}
]
},
{
"product": "AP Solo T350d",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "116.0.0.0.1543 and earlier "
}
]
},
{
"product": "AP Solo T350se",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "116.0.0.0.3136 and earlier "
}
]
},
{
"product": "AP Solo R350",
"vendor": "CommScope, Inc.",
"versions": [
{
"status": "affected",
"version": "116.0.0.0.1655 and earlier "
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo). If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in the product. As for the affected products/models/versions, see the information provided by the vendor listed under [References] section or the list under [Product Status] section."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Cross-site scripting (XSS)",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-12-07T06:22:32.328Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://support.ruckuswireless.com/security_bulletins/323"
},
{
"url": "https://jvn.jp/en/jp/JVN45891816/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2023-49225",
"datePublished": "2023-12-07T06:22:32.328Z",
"dateReserved": "2023-11-24T00:19:52.591Z",
"dateUpdated": "2025-05-28T13:58:41.326Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2020-21161 (GCVE-0-2020-21161)
Vulnerability from cvelistv5 – Published: 2022-06-27 14:56 – Updated: 2024-08-04 14:22
VLAI?
Summary
Cross Site Scripting (XSS) vulnerability in Ruckus Wireless ZoneDirector 9.8.3.0.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T14:22:25.581Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://ruckus.com"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://zonedirector.com"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://dollahibrahim.blogspot.com/2019/11/cross-site-scripting-on-ruckus.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Cross Site Scripting (XSS) vulnerability in Ruckus Wireless ZoneDirector 9.8.3.0."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-06-27T14:56:39",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "http://ruckus.com"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://zonedirector.com"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://dollahibrahim.blogspot.com/2019/11/cross-site-scripting-on-ruckus.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2020-21161",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Cross Site Scripting (XSS) vulnerability in Ruckus Wireless ZoneDirector 9.8.3.0."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://ruckus.com",
"refsource": "MISC",
"url": "http://ruckus.com"
},
{
"name": "http://zonedirector.com",
"refsource": "MISC",
"url": "http://zonedirector.com"
},
{
"name": "https://dollahibrahim.blogspot.com/2019/11/cross-site-scripting-on-ruckus.html",
"refsource": "MISC",
"url": "https://dollahibrahim.blogspot.com/2019/11/cross-site-scripting-on-ruckus.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2020-21161",
"datePublished": "2022-06-27T14:56:39",
"dateReserved": "2020-08-13T00:00:00",
"dateUpdated": "2024-08-04T14:22:25.581Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-6224 (GCVE-0-2017-6224)
Vulnerability from cvelistv5 – Published: 2017-10-13 17:00 – Updated: 2024-09-16 18:34
VLAI?
Summary
Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x (less than 10.0.1.0.17 MR1 release) and Ruckus Wireless Unleashed AP Firmware releases 200.0.x, 200.1.x, 200.2.x, 200.3.x, 200.4.x. contain OS Command Injection vulnerabilities that could allow local authenticated users to execute arbitrary privileged commands on the underlying operating system by appending those commands in the Common Name field in the Certificate Generation Request.
Severity ?
No CVSS data available.
CWE
- Authenticated Root Command Injection.
Assigner
References
| URL | Tags | ||||
|---|---|---|---|---|---|
|
|||||
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Brocade Communications Systems, Inc. | Zone Director Controller and Unleashed AP Firmware |
Affected:
ZD9.x
Affected: ZD10.0.0.x Affected: ZD10.0.1.x Affected: 200.x Affected: 200.2.x Affected: 200.3.x Affected: 200.4.x |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T15:25:49.092Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-092917.txt"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Zone Director Controller and Unleashed AP Firmware",
"vendor": "Brocade Communications Systems, Inc.",
"versions": [
{
"status": "affected",
"version": "ZD9.x"
},
{
"status": "affected",
"version": "ZD10.0.0.x"
},
{
"status": "affected",
"version": "ZD10.0.1.x"
},
{
"status": "affected",
"version": "200.x"
},
{
"status": "affected",
"version": "200.2.x"
},
{
"status": "affected",
"version": "200.3.x"
},
{
"status": "affected",
"version": "200.4.x"
}
]
}
],
"datePublic": "2017-09-27T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x (less than 10.0.1.0.17 MR1 release) and Ruckus Wireless Unleashed AP Firmware releases 200.0.x, 200.1.x, 200.2.x, 200.3.x, 200.4.x. contain OS Command Injection vulnerabilities that could allow local authenticated users to execute arbitrary privileged commands on the underlying operating system by appending those commands in the Common Name field in the Certificate Generation Request."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Authenticated Root Command Injection.",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-10-13T16:57:01",
"orgId": "87b297d7-335e-4844-9551-11b97995a791",
"shortName": "brocade"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-092917.txt"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "sirt@brocade.com",
"DATE_PUBLIC": "2017-09-27T00:00:00",
"ID": "CVE-2017-6224",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Zone Director Controller and Unleashed AP Firmware",
"version": {
"version_data": [
{
"version_value": "ZD9.x"
},
{
"version_value": "ZD10.0.0.x"
},
{
"version_value": "ZD10.0.1.x"
},
{
"version_value": "200.x"
},
{
"version_value": "200.2.x"
},
{
"version_value": "200.3.x"
},
{
"version_value": "200.4.x"
}
]
}
}
]
},
"vendor_name": "Brocade Communications Systems, Inc."
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x (less than 10.0.1.0.17 MR1 release) and Ruckus Wireless Unleashed AP Firmware releases 200.0.x, 200.1.x, 200.2.x, 200.3.x, 200.4.x. contain OS Command Injection vulnerabilities that could allow local authenticated users to execute arbitrary privileged commands on the underlying operating system by appending those commands in the Common Name field in the Certificate Generation Request."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Authenticated Root Command Injection."
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-092917.txt",
"refsource": "CONFIRM",
"url": "https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-092917.txt"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "87b297d7-335e-4844-9551-11b97995a791",
"assignerShortName": "brocade",
"cveId": "CVE-2017-6224",
"datePublished": "2017-10-13T17:00:00Z",
"dateReserved": "2017-02-23T00:00:00",
"dateUpdated": "2024-09-16T18:34:15.776Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}