Log in Start free

RUCKUS

Products

ProductCVEsExploitedLatest
SmartZone5–Aug 4, 2025
Network Director3–Aug 4, 2025
SmartZone 100-D (SZ100-D) (EOL)1–Mar 26, 2026
SmartZone 100 (SZ-100) (EOL)1–Mar 26, 2026
SmartZone 144-Dataplane (SZ144-D)1–Mar 26, 2026
SmartZone 144 (SZ-144)1–Mar 26, 2026
SmartZone 300 (SZ300) (EOL)1–Mar 26, 2026
ZoneDirector 1200 (EOL)1–Mar 26, 2026
RUCKUS Unleashed1–Mar 26, 2026

Exploited and recent CVEs

  • CVE-2021-4474 Medium 4.9 Ruckus AP CLI Arbitrary File Read Allows Authenticated Remote File Access 0.5%
  • CVE-2021-4474 Medium 4.9 Ruckus AP CLI Arbitrary File Read Allows Authenticated Remote File Access 0.5%
  • CVE-2021-4474 Medium 4.9 Ruckus AP CLI Arbitrary File Read Allows Authenticated Remote File Access 0.5%
  • CVE-2021-4474 Medium 4.9 Ruckus AP CLI Arbitrary File Read Allows Authenticated Remote File Access 0.5%
  • CVE-2021-4474 Medium 4.9 Ruckus AP CLI Arbitrary File Read Allows Authenticated Remote File Access 0.5%
  • CVE-2021-4474 Medium 4.9 Ruckus AP CLI Arbitrary File Read Allows Authenticated Remote File Access 0.5%
  • CVE-2021-4474 Medium 4.9 Ruckus AP CLI Arbitrary File Read Allows Authenticated Remote File Access 0.5%
  • CVE-2025-44962 Medium 5.0 RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files. 0.9%
  • CVE-2025-44961 Critical 9.9 In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user. 2.1%
  • CVE-2025-44955 High 8.8 RUCKUS Network Director (RND) before 4.5 allows jailed users to obtain root access vis a weak, hardcoded password. 0.5%
  • CVE-2025-44958 Medium 5.3 RUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format. 0.4%
  • CVE-2025-44954 Critical 9.0 RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account. 0.7%
  • CVE-2025-44960 High 8.5 RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route. 1.8%
  • CVE-2025-44957 High 8.5 Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers. 1.1%
  • CVE-2025-44963 Critical 9.0 RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded value of a certain secret key. 0.6%