Ruckus Smartzone Firmware CVEs and Security Vulnerabilities

CVE-2025-44962

RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files.

CVSS 3.1 · 5 Medium EPSS < 1% KEV · Not listed

Vendors

Commscope Ruckus

Products

Ruckus C110 Ruckus E510 Ruckus H320 and 29 more

CVE-2025-44961

In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user.

CVSS 3.1 · 9.9 Critical EPSS 2.1% KEV · Not listed

Vendors

Commscope

Products

Ruckus C110 Ruckus E510 Ruckus H320 and 28 more

CVE-2025-44960

RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route.

CVSS 3.1 · 8.5 High EPSS 1.8% KEV · Not listed

Vendors

Commscope Ruckus

Products

Ruckus C110 Ruckus E510 Ruckus H320 and 29 more

CVE-2025-44957

Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers.

CVSS 3.1 · 8.5 High EPSS 1.1% KEV · Not listed

Vendors

Commscope Ruckus

Products

Ruckus C110 Ruckus E510 Ruckus H320 and 29 more

CVE-2023-25717

Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.

CVSS 3.1 · 9.8 Critical EPSS 98.1% KEV · Listed

Vendors

Commscope Ruckuswireless

Products

Ruckus Smartzone Firmware E510 H320 and 58 more

CVE-2025-44954

RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account.

CVSS 3.1 · 9 Critical EPSS < 1% KEV · Not listed

Vendors

Commscope Ruckus

Products

Ruckus C110 Ruckus E510 Ruckus H320 and 28 more

Search vulnerabilities