Approved changes feed: RSS · Atom

cpe:2.3:h:commscope:ruckus_smartzone_144-federal:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorCommscope (eb313045-4870-5e60-bc46-581a488779cc)
ProductRuckus Smartzone 144 Federal (8cb1251e-d3ae-53b3-addd-5fa0712deb64)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-44962 not_vulnerable 2026-06-08 07:25:10.924374 Details available
MEDIUM (5)
RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files.
Published: 2025-08-04T00:00:00.000Z
Updated: 2025-11-03T20:04:19.843Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-44961 not_vulnerable 2026-06-08 07:25:10.922376 Details available
CRITICAL (9.9)
In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user.
Published: 2025-08-04T00:00:00.000Z
Updated: 2025-11-03T20:04:18.408Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-44960 not_vulnerable 2026-06-08 07:25:10.919787 Details available
HIGH (8.5)
RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route.
Published: 2025-08-04T00:00:00.000Z
Updated: 2025-11-03T20:04:17.043Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-44957 not_vulnerable 2026-06-08 07:25:10.917705 Details available
HIGH (8.5)
Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers.
Published: 2025-08-04T00:00:00.000Z
Updated: 2025-11-03T20:04:14.322Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-44954 not_vulnerable 2026-06-08 07:25:10.909201 Details available
CRITICAL (9)
RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account.
Published: 2025-08-04T00:00:00.000Z
Updated: 2025-08-05T17:43:44.355Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.