CVE Feed

    Dashboard / CVE / CVE-2025-46122

    CVE-2025-46122

    An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, where the authenticated diagnostics API endpoint `/admin/_cmdstat.jsp` passes attacker-controlled input to the shell without adequate validation, enabling a remote attacker to specify a target by MAC address and execute arbitrary commands as root.

    Published:Jul 21, 2025
    Last Modified:Aug 5, 2025
    EPS:Jul 21, 2025
    EPSS Score:0.00292
    CVSS Score:9.1

    Affected Products

    Vendor
    Commscope
    Product
    Ruckus C110
    Vendor
    Commscope
    Product
    Ruckus E510
    Vendor
    Commscope
    Product
    Ruckus H320
    Vendor
    Commscope
    Product
    Ruckus H350
    Vendor
    Commscope
    Product
    Ruckus H510
    Vendor
    Commscope
    Product
    Ruckus H550
    Vendor
    Commscope
    Product
    Ruckus M510
    Vendor
    Commscope
    Product
    Ruckus M510-jp
    Vendor
    Commscope
    Product
    Ruckus R310
    Vendor
    Commscope
    Product
    Ruckus R320
    Vendor
    Commscope
    Product
    Ruckus R350
    Vendor
    Commscope
    Product
    Ruckus R350e
    Vendor
    Commscope
    Product
    Ruckus R510
    Vendor
    Commscope
    Product
    Ruckus R550
    Vendor
    Commscope
    Product
    Ruckus R560
    Vendor
    Commscope
    Product
    Ruckus R610
    Vendor
    Commscope
    Product
    Ruckus R650
    Vendor
    Commscope
    Product
    Ruckus R670
    Vendor
    Commscope
    Product
    Ruckus R710
    Vendor
    Commscope
    Product
    Ruckus R720
    Vendor
    Commscope
    Product
    Ruckus R730
    Vendor
    Commscope
    Product
    Ruckus R750
    Vendor
    Commscope
    Product
    Ruckus R760
    Vendor
    Commscope
    Product
    Ruckus R770
    Vendor
    Commscope
    Product
    Ruckus R850
    Vendor
    Commscope
    Product
    Ruckus T310c
    Vendor
    Commscope
    Product
    Ruckus T310n
    Vendor
    Commscope
    Product
    Ruckus T310s
    Vendor
    Commscope
    Product
    Ruckus T350c
    Vendor
    Commscope
    Product
    Ruckus T350d
    Vendor
    Commscope
    Product
    Ruckus T350se
    Vendor
    Commscope
    Product
    Ruckus T610
    Vendor
    Commscope
    Product
    Ruckus T670
    Vendor
    Commscope
    Product
    Ruckus T710
    Vendor
    Commscope
    Product
    Ruckus T710s
    Vendor
    Commscope
    Product
    Ruckus T750
    Vendor
    Commscope
    Product
    Ruckus T750se
    Vendor
    Commscope
    Product
    Ruckus T811-cm
    Vendor
    Commscope
    Product
    Ruckus T811-cm \(non-sfp\)
    Vendor
    Commscope
    Product
    Zonedirector 1200
    Vendor
    Ruckuswireless
    Product
    Ruckus Unleashed
    Vendor
    Ruckuswireless
    Product
    Ruckus Zonedirector

    Exploits

    https://sector7.computest.nl/post/2025-07-ruckus-unleashed/

    Related CVEs

    CVE-2023-7338 (CVSS 7.7) — Ruckus Unleashed contains a remote code execution vulnerability in the web-based management interface that all…
    CVE-2025-44954 (CVSS 9) — RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user …
    CVE-2025-44962 (CVSS 5) — RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files.…
    CVE-2025-44957 (CVSS 8.5) — Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafte…
    CVE-2025-44960 (CVSS 8.5) — RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an A…
    CVE-2025-44961 (CVSS 9.9) — In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field …
    CVE-2025-46123 (CVSS 7.2) — An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruck…
    CVE-2025-46116 (CVSS 8.8) — An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruck…
    CVE-2025-46117 (CVSS 9.1) — An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruck…
    CVE-2025-46118 (CVSS 5.3) — An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139 and in Rucku…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High