RUCKUS SmartZone

• CVE-2025-44954 Critical 9.0 RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account. 0.7%
• CVE-2025-44960 High 8.5 RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route. 1.8%
• CVE-2025-44957 High 8.5 Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers. 1.1%
• CVE-2025-44961 Critical 9.9 In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user. 2.1%
• CVE-2025-44962 Medium 5.0 RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files. 0.9%