Vulnerabilities in Ruckus
9 resultsVexday analysis
A Ruckus apresenta presença mínima na base de vulnerabilidades com apenas 1 CVE registrado, sem incidentes de exploração ativa conhecida ou classificações críticas. A vulnerabilidade documentada refere-se a controle inadequado de permissões de arquivo (CWE-552), com histórico anterior a 90 dias, representando risco baixo no contexto atual.
CVE-2025-44961CRITICALIn RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated uEPSS 2.0%CVE-2025-44960HIGHRUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route.EPSS 1.8%CVE-2025-44957HIGHRuckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers.EPSS 0.9%CVE-2025-44962MEDIUMRUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files.EPSS 0.7%CVE-2025-44954CRITICALRUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account.EPSS 0.7%CVE-2025-44963CRITICALRUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded value of a certain sEPSS 0.6%CVE-2021-4474MEDIUMRuckus AP CLI Arbitrary File Read Allows Authenticated Remote File AccessEPSS 0.5%CVE-2025-44955HIGHRUCKUS Network Director (RND) before 4.5 allows jailed users to obtain root access vis a weak, hardcoded password.EPSS 0.5%CVE-2025-44958MEDIUMRUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format.EPSS 0.4%