Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2023-45992

EPSS 0.55% · P68
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2023-45992

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability in the web-based interface of the RUCKUS Cloudpath product on version 5.12 build 5538 or before to could allow a remote, unauthenticated attacker to execute persistent XSS and CSRF attacks against a user of the admin management interface. A successful attack, combined with a certain admin activity, could allow the attacker to gain full admin privileges on the exploited system.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Ruckus Wireless Ruckus CloudPath 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Ruckus Wireless Ruckus CloudPath是一种网络访问控制(NAC)解决方案,用于管理网络用户的身份和访问权限,特别是在Wi-Fi网络中。它的目标是提供高级的网络访问管理和安全性功能,确保用户可以安全地连接到网络,并且网络资源受到保护。 Ruckus Wireless Ruckus CloudPath 5.12.54414 版本存在跨站脚本漏洞,该漏洞源于通过精心设计的脚本将权限升级到入门门户中的 macaddress 参数。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2023-45992

#POC DescriptionSource LinkShenlong Link
1Nonehttps://github.com/harry935/CVE-2023-45992POC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-45992

登录查看更多情报信息。

Same Patch Batch · n/a · 2023-10-19 · 38 CVEs total

CVE-2023-45280Yamcs 跨站脚本漏洞
CVE-2023-27795IXP Data EasyInstall 安全漏洞
CVE-2023-27793IXP Data EasyInstall 安全漏洞
CVE-2023-27792IXP Data EasyInstall 安全漏洞
CVE-2023-45376PrestaShop SQL注入漏洞
CVE-2023-30633Insyde InsydeH2O 安全漏洞
CVE-2023-27791IXP Data EasyInstall 安全特征问题漏洞
CVE-2022-42150TinyLab linux-lab 安全漏洞
CVE-2023-43345opensolution Quick CMS 跨站脚本漏洞
CVE-2023-43340Evolution CMS 跨站脚本漏洞
CVE-2023-30131IXP Data EasyInstall 安全漏洞
CVE-2023-45279Yamcs 跨站脚本漏洞
CVE-2023-44690mycli 加密问题漏洞
CVE-2023-43875Subrion CMS 跨站脚本漏洞
CVE-2023-43359CMS Made Simple 跨站脚本漏洞
CVE-2023-43344OpenSolution Quick CMS 跨站脚本漏洞
CVE-2023-43342OpenSolution Quick CMS 跨站脚本漏洞
CVE-2023-43341Evolution CMS 跨站脚本漏洞
CVE-2023-39731Kaibutsunosato 安全漏洞
CVE-2023-31046PaperCut MF和PaperCut NG 路径遍历漏洞

Showing top 20 of 38 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2023-45992

No comments yet


Leave a comment