CVE-2023-45992: Commscope Ruckus Cloudpath Enrollment System

Critical severity, CVSS 9.6. EPSS: 0.6% chance of exploitation in the next 30 days.

A vulnerability in the web-based interface of the RUCKUS Cloudpath product on version 5.12 build 5538 or before to could allow a remote, unauthenticated attacker to execute persistent XSS and CSRF attacks against a user of the admin management interface. A successful attack, combined with a certain admin activity, could allow the attacker to gain full admin privileges on the exploited system.

Affected products

• Commscope Ruckus Cloudpath Enrollment System: up to and including 5.12.5538

Published 2023-10-19. Last modified 2026-07-09.