CVE-2025-44961

Published: Aug 4, 2025Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user.

Products: Commscope: Ruckus Smartzone Firmware, Ruckus Network Director

2 products

Configuration A

6 vulnerable · 29 platform

Vulnerable Software	Affected Versions
Commscope Ruckus Smartzone Firmware	Before 6.1.2
Commscope Ruckus Smartzone Firmware	Version 6.1.2
Commscope Ruckus Smartzone Firmware	Version 6.1.2 p2
Commscope Ruckus Smartzone Firmware	Version 6.1.2 p3
Commscope Ruckus Smartzone Firmware	Version 7.0.0
Commscope Ruckus Smartzone Firmware	Version 7.1.0

Running on/with	Platform Versions
Commscope Ruckus C110	All versions
Commscope Ruckus E510	All versions
Commscope Ruckus H320	All versions
Commscope Ruckus H350	All versions
Commscope Ruckus H510	All versions
Commscope Ruckus M510	All versions
Commscope Ruckus R320	All versions
Commscope Ruckus R510	All versions
Commscope Ruckus R560	All versions
Commscope Ruckus R610	All versions
Commscope Ruckus R710	All versions
Commscope Ruckus R720	All versions
Commscope Ruckus R730	All versions
Commscope Ruckus R750	All versions
Commscope Ruckus Smartzone 100	All versions
Commscope Ruckus Smartzone 100 D	All versions
Commscope Ruckus Smartzone 144	All versions
Commscope Ruckus Smartzone 144 Federal	All versions
Commscope Ruckus Smartzone 300	All versions
Commscope Ruckus Smartzone 300 Federal	All versions
Commscope Ruckus T310c	All versions
Commscope Ruckus T310d	All versions
Commscope Ruckus T310n	All versions
Commscope Ruckus T310s	All versions
Commscope Ruckus T350se	All versions
Commscope Ruckus T750	All versions
Commscope Ruckus T750se	All versions
Commscope Ruckus Virtual Smartzone	All versions
Commscope Ruckus Virtual Smartzone Federal	All versions