Ruckus Smartzone 144 CVEs and Security Vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2025-44962

RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files.

CVSS 3.1 · 5 Medium EPSS < 1% KEV · Not listed

Vendors

Commscope Ruckus

Products

Ruckus C110 Ruckus E510 Ruckus H320 and 29 more

CVE-2025-44961

In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user.

CVSS 3.1 · 9.9 Critical EPSS 2.1% KEV · Not listed

Vendors

Commscope

Products

Ruckus C110 Ruckus E510 Ruckus H320 and 28 more

CVE-2025-44960

RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route.

CVSS 3.1 · 8.5 High EPSS 1.8% KEV · Not listed

Vendors

Commscope Ruckus

Products

Ruckus C110 Ruckus E510 Ruckus H320 and 29 more

CVE-2025-44957

Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers.

CVSS 3.1 · 8.5 High EPSS 1.1% KEV · Not listed

Vendors

Commscope Ruckus

Products

Ruckus C110 Ruckus E510 Ruckus H320 and 29 more

CVE-2025-44954

RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account.

CVSS 3.1 · 9 Critical EPSS < 1% KEV · Not listed

Vendors

Commscope Ruckus

Products

Ruckus C110 Ruckus E510 Ruckus H320 and 28 more

Page 1 of 1.