RS
Product
Ruckus Smartzone Firmware
On CISA KEVExploited in the wild
6
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 1Low 0
Watch
Add Ruckus Smartzone Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-25717 In wildKEV | 9.8 | Feb 13 | Multiple Ruckus Wireless Products CSRF and RCE Vulnerability Affected: before 5.2.1.3; 6.1.0.0.935; before 5.2.1.3.1695 |
| CVE-2025-44954 | 9.8 | Aug 4 | RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account Affected: before 6.1.2; 6.1.2; 6.1.2; 6.1.2; 7.0.0; 7.1.0 |
| CVE-2025-44957 | 8.8 | Aug 4 | Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers Affected: before 6.1.2; 6.1.2; 6.1.2; 6.1.2; 7.0.0; 7.1.0 |
| CVE-2025-44960 | 8.8 | Aug 4 | RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route Affected: before 6.1.2; 6.1.2; 6.1.2; 6.1.2; 7.0.0; 7.1.0 |
| CVE-2025-44961 | 8.8 | Aug 4 | In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user Affected: before 6.1.2; 6.1.2; 6.1.2; 6.1.2; 7.0.0; 7.1.0 |
| CVE-2025-44962 | 4.3 | Aug 4 | RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files Affected: before 6.1.2; 6.1.2; 6.1.2; 6.1.2; 7.0.0; 7.1.0 |
Showing 6