A vulnerability in the web-based interface of the RUCKUS Cloudpath product on version 5.12 build 5538 or before to could allow a remote, unauthenticated attacker to execute persistent XSS and CSRF attacks against a user of the admin management interface. A successful attack, combined with a certain admin activity, could allow the attacker to gain full admin privileges on the exploited system.
References
| Link | Resource |
|---|---|
| http://ruckus.com | Not Applicable |
| https://github.com/harry935/CVE-2023-45992 | Exploit Third Party Advisory |
| https://server.cloudpath/ | Broken Link |
| https://server.cloudpath/admin/enrollmentData/ | Broken Link |
| https://support.ruckuswireless.com/security_bulletins/322 | Vendor Advisory |
| http://ruckus.com | Not Applicable |
| https://github.com/harry935/CVE-2023-45992 | Exploit Third Party Advisory |
| https://server.cloudpath/ | Broken Link |
| https://server.cloudpath/admin/enrollmentData/ | Broken Link |
| https://support.ruckuswireless.com/security_bulletins/322 | Vendor Advisory |
Configurations
History
21 Nov 2024, 08:27
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://ruckus.com - Not Applicable | |
| References | () https://github.com/harry935/CVE-2023-45992 - Exploit, Third Party Advisory | |
| References | () https://server.cloudpath/ - Broken Link | |
| References | () https://server.cloudpath/admin/enrollmentData/ - Broken Link | |
| References | () https://support.ruckuswireless.com/security_bulletins/322 - Vendor Advisory |
12 Jan 2024, 20:50
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Commscope ruckus Cloudpath Enrollment System
|
|
| CPE | cpe:2.3:a:commscope:ruckus_cloudpath_enrollment_system:*:*:*:*:*:*:*:* |
Information
Published : 2023-10-19 19:15
Updated : 2024-11-21 08:27
NVD link : CVE-2023-45992
Mitre link : CVE-2023-45992
CVE.ORG link : CVE-2023-45992
JSON object : View
Products Affected
commscope
- ruckus_cloudpath_enrollment_system