RU
Vendor
Ruckus
20
CVEs
0
On KEV
0
New 30D
Products
SM9.8
SmartZone
RUCKUS
5 CVEs0 on KEV0 new
WH8.8
Wireless H500
Ruckus
4 CVEs0 on KEV0 new
ND8.8
Network Director
RUCKUS
3 CVEs0 on KEV0 new
RU4.9
RUCKUS Unleashed
Ruckus
1 CVEs0 on KEV0 new
S14.9
SmartZone 100-D (SZ100-D) (EOL)
Ruckus
1 CVEs0 on KEV0 new
S14.9
SmartZone 100 (SZ-100) (EOL)
Ruckus
1 CVEs0 on KEV0 new
S14.9
SmartZone 144-Dataplane (SZ144-D)
Ruckus
1 CVEs0 on KEV0 new
S14.9
SmartZone 144 (SZ-144)
Ruckus
1 CVEs0 on KEV0 new
S34.9
SmartZone 300 (SZ300) (EOL)
Ruckus
1 CVEs0 on KEV0 new
Z14.9
ZoneDirector 1200 (EOL)
Ruckus
1 CVEs0 on KEV0 new
ZF8.8
Zonedirector Firmware
Ruckus
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2021-4474 | S1 SmartZone 100 (SZ-100) (EOL) Ruckus | 4.9 | Mar 26 | Ruckus AP CLI Arbitrary File Read Allows Authenticated Remote File Access |
| CVE-2025-44957 | SM SmartZone RUCKUS | 8.8 | Aug 4 | Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers |
| CVE-2025-44958 | ND Network Director RUCKUS | 7.5 | Aug 4 | RUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format |
| CVE-2025-44960 | SM SmartZone RUCKUS | 8.8 | Aug 4 | RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route |
| CVE-2025-44961 | SM SmartZone RUCKUS | 8.8 | Aug 4 | In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user |
| CVE-2025-44962 | SM SmartZone RUCKUS | 4.3 | Aug 4 | RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files |
| CVE-2025-44963 | ND Network Director RUCKUS | 8.1 | Aug 4 | RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded value of a certain secret key |
| CVE-2025-44955 | ND Network Director RUCKUS | 8.8 | Aug 4 | RUCKUS Network Director (RND) before 4.5 allows jailed users to obtain root access vis a weak, hardcoded password |
| CVE-2025-44954 | SM SmartZone RUCKUS | 9.8 | Aug 4 | RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account |
| CVE-2017-6223 | ZF Zonedirector Firmware Ruckus | 8.8 | Oct 13 | Ruckus Wireless Zone Director Controller firmware releases ZD9.9.x, ZD9.10.x, ZD9.13.0.x less than 9.13.0.0.232 contain OS Command Injection vulnerabilities in the ping… |
| CVE-2016-1000215 | WH Wireless H500 Ruckus | 7.5 | Oct 25 | Ruckus Wireless H500 web management interface denial of service |
| CVE-2016-1000214 | WH Wireless H500 Ruckus | 5.3 | Oct 25 | Ruckus Wireless H500 web management interface authentication bypass |
| CVE-2016-1000213 | WH Wireless H500 Ruckus | 8.8 | Oct 25 | Ruckus Wireless H500 web management interface CSRF |
| CVE-2016-1000216 | WH Wireless H500 Ruckus | 8.8 | Oct 10 | Ruckus Wireless H500 web management interface authenticated command injection |