RUCKUS vulnerabilities
9 published CVEs name RUCKUS among the affected products.
- 9Published CVEs9 of them scored
- 1Last 12 monthspublished in the last year
- 3Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2021-4474
Ruckus AP CLI Arbitrary File Read Allows Authenticated Remote File Access
Ruckus Wireless · RUCKUS Access Point
Medium6.9 - CVE-2025-44963
RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded value of a certain secret key.
RUCKUS · Network Director
Critical9.0 - CVE-2025-44962
RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files.
RUCKUS · SmartZone
Medium5.0 - CVE-2025-44961
In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user.
RUCKUS · SmartZone
Critical9.9 - CVE-2025-44960
RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route.
RUCKUS · SmartZone
High8.5 - CVE-2025-44958
RUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format.
RUCKUS · Network Director
Medium5.3 - CVE-2025-44957
Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers.
RUCKUS · SmartZone
High8.5 - CVE-2025-44955
RUCKUS Network Director (RND) before 4.5 allows jailed users to obtain root access vis a weak, hardcoded password.
RUCKUS · Network Director
High8.8 - CVE-2025-44954
RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account.
RUCKUS · SmartZone
Critical9.0