Exploitation Summary
EIP tracks 1 public exploit for CVE-2023-45992. PoCs published by harry935.
AI-analyzed exploit summary The repository lacks functional exploit code and instead promises future technical details, which is a common tactic for luring researchers into external downloads or monetization schemes.
Description
A vulnerability in the web-based interface of the RUCKUS Cloudpath product on version 5.12 build 5538 or before to could allow a remote, unauthenticated attacker to execute persistent XSS and CSRF attacks against a user of the admin management interface. A successful attack, combined with a certain admin activity, could allow the attacker to gain full admin privileges on the exploited system.
Exploits (1)
The repository lacks functional exploit code and instead promises future technical details, which is a common tactic for luring researchers into external downloads or monetization schemes.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H