CVE-2023-45992

Summary

CVE-2023-45992 is a vulnerability affecting the web-based interface of RUCKUS Cloudpath version 5.12 build 5538 and earlier. It allows unauthenticated attackers to execute persistent Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) attacks against users of the admin management interface. A successful exploitation, coupled with specific admin activities, may result in the attacker gaining full admin privileges on the targeted system. This vulnerability poses a significant risk and requires immediate remediation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.