CVE Feed

    Dashboard / CVE / CVE-2025-44961

    CVE-2025-44961

    In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user.

    Published:Aug 4, 2025
    Last Modified:Nov 3, 2025
    EPS:Aug 4, 2025
    EPSS Score:0.00157
    CVSS Score:9.9

    Affected Products

    Vendor
    Commscope
    Product
    Ruckus C110
    Vendor
    Commscope
    Product
    Ruckus E510
    Vendor
    Commscope
    Product
    Ruckus H320
    Vendor
    Commscope
    Product
    Ruckus H350
    Vendor
    Commscope
    Product
    Ruckus H510
    Vendor
    Commscope
    Product
    Ruckus M510
    Vendor
    Commscope
    Product
    Ruckus Network Director
    Vendor
    Commscope
    Product
    Ruckus R320
    Vendor
    Commscope
    Product
    Ruckus R510
    Vendor
    Commscope
    Product
    Ruckus R560
    Vendor
    Commscope
    Product
    Ruckus R610
    Vendor
    Commscope
    Product
    Ruckus R710
    Vendor
    Commscope
    Product
    Ruckus R720
    Vendor
    Commscope
    Product
    Ruckus R730
    Vendor
    Commscope
    Product
    Ruckus R750
    Vendor
    Commscope
    Product
    Ruckus Smartzone 100
    Vendor
    Commscope
    Product
    Ruckus Smartzone 100-d
    Vendor
    Commscope
    Product
    Ruckus Smartzone 144
    Vendor
    Commscope
    Product
    Ruckus Smartzone 144-federal
    Vendor
    Commscope
    Product
    Ruckus Smartzone 300
    Vendor
    Commscope
    Product
    Ruckus Smartzone 300-federal
    Vendor
    Commscope
    Product
    Ruckus Smartzone Firmware
    Vendor
    Commscope
    Product
    Ruckus T310c
    Vendor
    Commscope
    Product
    Ruckus T310d
    Vendor
    Commscope
    Product
    Ruckus T310n
    Vendor
    Commscope
    Product
    Ruckus T310s
    Vendor
    Commscope
    Product
    Ruckus T350se
    Vendor
    Commscope
    Product
    Ruckus T750
    Vendor
    Commscope
    Product
    Ruckus T750se
    Vendor
    Commscope
    Product
    Ruckus Virtual Smartzone
    Vendor
    Commscope
    Product
    Ruckus Virtual Smartzone-federal

    Exploits

    No exploit reference

    Related CVEs

    CVE-2023-7338 (CVSS 7.7) — Ruckus Unleashed contains a remote code execution vulnerability in the web-based management interface that all…
    CVE-2025-44954 (CVSS 9) — RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user …
    CVE-2025-44962 (CVSS 5) — RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files.…
    CVE-2025-44957 (CVSS 8.5) — Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafte…
    CVE-2025-44960 (CVSS 8.5) — RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an A…
    CVE-2025-46123 (CVSS 7.2) — An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruck…
    CVE-2025-46116 (CVSS 8.8) — An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruck…
    CVE-2025-46117 (CVSS 9.1) — An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruck…
    CVE-2025-46118 (CVSS 5.3) — An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139 and in Rucku…
    CVE-2025-46119 (CVSS 6.3) — An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.27 and 200.18.7.1.323, and in Ruck…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High