Paper/Archive/CVE-2025-44961

CVE-2025-44961

RUCKUS SmartZone — In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticate…

EPSS 2%CVSS 9.9

critical.is priorityof 100

CVSS 9.9 (CNA)9.9 / 10 × 3029.7 Not in CISA KEV+300.0 EPSS percentile 81.6.816 × 2016.3 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user.

Affected

ProductAffectedFixed inSource

SmartZone< 6.1.2p3 Refresh Build6.1.2p3 Refresh BuildCNA

Scores by source

mitre (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refkb.cert.org/vuls/id/613753 refwebresources.commscope.com/download/assets/FAQ+Security+Advisory%3A+ID+20250710/225f44ac3bd311f095821adcaa92e24e refclaroty.com/team82/disclosure-dashboard/cve-2025-44961 refkb.cert.org/vuls/id/613753