Login Request a demo
RS
Product
Ruckus Smartzone Firmware
by Commscope · last CVE Aug 4, 2025
On CISA KEVExploited in the wild
6
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 2High 3Medium 1Low 0
Severity
All severities6Critical2High3Medium1Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Ruckus Smartzone Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-44957
8.8
1%
Aug 4
Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers
Affected: before 6.1.2; 6.1.2; 6.1.2; 6.1.2; 7.0.0; 7.1.0
CVE-2025-44960
8.8
2%
Aug 4
RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route
Affected: before 6.1.2; 6.1.2; 6.1.2; 6.1.2; 7.0.0; 7.1.0
CVE-2025-44961
8.8
2%
Aug 4
In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user
Affected: before 6.1.2; 6.1.2; 6.1.2; 6.1.2; 7.0.0; 7.1.0
Showing 3