HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2025-44957

CVSS 8.5v3.1pub. 2025-08-04upd. 2025-11-03

Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers.

CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

  • Commscope Ruckus C110

    HW
    Commscope
    all versions

  • Commscope Ruckus E510

    HW
    Commscope
    all versions

  • Commscope Ruckus H320

    HW
    Commscope
    all versions

  • Commscope Ruckus H350

    HW
    Commscope
    all versions

  • Commscope Ruckus H510

    HW
    Commscope
    all versions

  • Commscope Ruckus M510

    HW
    Commscope
    all versions

  • Commscope Ruckus Network Director

    APP
    Commscope
    < 4.5.0.51

  • Commscope Ruckus R320

    HW
    Commscope
    all versions

  • Commscope Ruckus R510

    HW
    Commscope
    all versions

  • Commscope Ruckus R560

    HW
    Commscope
    all versions

  • Commscope Ruckus R610

    HW
    Commscope
    all versions

  • Commscope Ruckus R710

    HW
    Commscope
    all versions

  • Commscope Ruckus R720

    HW
    Commscope
    all versions

  • Commscope Ruckus R730

    HW
    Commscope
    all versions

  • Commscope Ruckus R750

    HW
    Commscope
    all versions

  • Commscope Ruckus Smartzone 100

    HW
    Commscope
    all versions

  • Commscope Ruckus Smartzone 100 D

    HW
    Commscope
    all versions

  • Commscope Ruckus Smartzone 144

    HW
    Commscope
    all versions

  • Commscope Ruckus Smartzone 144 Federal

    HW
    Commscope
    all versions

  • Commscope Ruckus Smartzone 300

    HW
    Commscope
    all versions

  • Commscope Ruckus Smartzone 300 Federal

    HW
    Commscope
    all versions

  • Commscope Ruckus Smartzone Firmware

    OS
    Commscope
    6.1.27.0.07.1.0< 6.1.2

  • Commscope Ruckus T310c

    HW
    Commscope
    all versions

  • Commscope Ruckus T310d

    HW
    Commscope
    all versions

  • Commscope Ruckus T310n

    HW
    Commscope
    all versions

  • Commscope Ruckus T310s

    HW
    Commscope
    all versions

  • Commscope Ruckus T350se

    HW
    Commscope
    all versions

  • Commscope Ruckus T750

    HW
    Commscope
    all versions

  • Commscope Ruckus T750se

    HW
    Commscope
    all versions

  • Commscope Ruckus Virtual Smartzone

    APP
    Commscope
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2023-25717CRITICAL9.8⚠ KEVPL ✓same product

RCE bez uwierzytelnienia w Ruckus Wireless Admin (do wersji 10.4)

CVE-2025-67304CRITICAL9.8PL ✓same product

Hardcoded credentials w Ruckus Network Director — dostęp do PostgreSQL i RCE

CVE-2025-67305CRITICAL9.8PL ✓same product

Hardcoded SSH keys w Commscope RUCKUS Network Director (RCE)

CVE-2025-44954CRITICAL9.0PL ✓same product

Hardcoded SSH private key w RUCKUS SmartZone — dostęp root zdalnie

CVE-2025-44961CRITICAL9.9PL ✓same product

Command injection w RUCKUS SmartZone przez pole adresu IP