Paper/Archive/CVE-2025-44954

CVE-2025-44954

RUCKUS SmartZone — RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account.

EPSS 0.7%CVSS 9.8

critical.is priorityof 100

40

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 54.5.545 × 2010.9 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account.

Affected

ProductAffectedFixed inSource

SmartZone< 6.1.2p3 Refresh Build6.1.2p3 Refresh BuildCNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

mitre (CNA)9.0CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refkb.cert.org/vuls/id/613753 refwebresources.commscope.com/download/assets/FAQ+Security+Advisory%3A+ID+20250710/225f44ac3bd311f095821adcaa92e24e refclaroty.com/team82/disclosure-dashboard/cve-2025-44954