Login Request a demo
SM
Product
SmartZone
by RUCKUS · last CVE Aug 4, 2025
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 3Medium 1Low 0
Severity
All severities5Critical1High3Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add SmartZone to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-44954
9.8
1%
Aug 4
RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account
Affected: before 6.1.2p3 Refresh Build
CVE-2025-44957
8.8
1%
Aug 4
Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers
Affected: before 6.1.2p3 Refresh Build
CVE-2025-44960
8.8
2%
Aug 4
RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route
Affected: before 6.1.2p3 Refresh Build
CVE-2025-44961
8.8
2%
Aug 4
In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user
Affected: before 6.1.2p3 Refresh Build
CVE-2025-44962
4.3
1%
Aug 4
RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files
Affected: before 6.1.2p3 Refresh Build
Showing 5