CVE-2023-45992 Information

Description

Cross Site Scripting vulnerability in Ruckus Wireless (CommScope) Ruckus CloudPath v.5.12.54414 allows a remote attacker to escalate privileges via a crafted script to the macaddress parameter in the onboarding portal.

Reference

http://ruckus.com https://github.com/harry935/CVE-2023-45992 https://support.ruckuswireless.com/security_bulletins/322 https://server.cloudpath/ https://server.cloudpath/admin/enrollmentData/