Ruckus Smartzone Firmware

ruckus_smartzone_firmware

Vendor: Commscope • 6 CVEs

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-44962 1Commscope 2Ruckus Network Director Ruckus Smartzone Firmware Jun 17, 2026 Aug 4, 2025 N/A· v4 4.3 MEDIUM· v3 N/A· v2 RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files.
CVE-2025-44961 1Commscope 2Ruckus Network Director Ruckus Smartzone Firmware Jun 17, 2026 Aug 4, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user.
CVE-2025-44960 1Commscope 2Ruckus Network Director Ruckus Smartzone Firmware Jun 17, 2026 Aug 4, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route.
CVE-2025-44957 1Commscope 2Ruckus Network Director Ruckus Smartzone Firmware Jun 17, 2026 Aug 4, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers.
CVE-2025-44954 1Commscope 1Ruckus Smartzone Firmware Jun 17, 2026 Aug 4, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account.
CVE-2023-25717 2Commscope Ruckuswireless 3Ruckus Smartzone Firmware Ruckus Wireless AdminSmartzone Ap Jun 17, 2026 Feb 13, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.