GCVE - cpe:2.3:a:commscope:ruckus_virtual_smartzone:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:commscope:ruckus_virtual_smartzone:-:*:*:*:*:*:*:*

part: a version: - update: *

Vendor	Commscope (`eb313045-4870-5e60-bc46-581a488779cc`)
Product	Ruckus Virtual Smartzone (`ba807a33-0354-5560-8ca4-7fbc285dbadf`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-44962`	not_vulnerable	2026-06-08 07:25:10.923709	Details available MEDIUM (5) RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files. Published: 2025-08-04T00:00:00.000Z Updated: 2025-11-03T20:04:19.843Z Open on db.gcve.eu Reference links https://kb.cert.org/vuls/id/613753 https://webresources.commscope.com/download/assets/FAQ+Security+Advisory%3A+ID+20250710/225f44ac3bd311f095821adcaa92e24e https://claroty.com/team82/disclosure-dashboard/cve-2025-44962	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-44961`	not_vulnerable	2026-06-08 07:25:10.921128	Details available CRITICAL (9.9) In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user. Published: 2025-08-04T00:00:00.000Z Updated: 2025-11-03T20:04:18.408Z Open on db.gcve.eu Reference links https://kb.cert.org/vuls/id/613753 https://webresources.commscope.com/download/assets/FAQ+Security+Advisory%3A+ID+20250710/225f44ac3bd311f095821adcaa92e24e https://claroty.com/team82/disclosure-dashboard/cve-2025-44961	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-44960`	not_vulnerable	2026-06-08 07:25:10.919110	Details available HIGH (8.5) RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route. Published: 2025-08-04T00:00:00.000Z Updated: 2025-11-03T20:04:17.043Z Open on db.gcve.eu Reference links https://kb.cert.org/vuls/id/613753 https://webresources.commscope.com/download/assets/FAQ+Security+Advisory%3A+ID+20250710/225f44ac3bd311f095821adcaa92e24e https://claroty.com/team82/disclosure-dashboard/cve-2025-44960	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-44957`	not_vulnerable	2026-06-08 07:25:10.916856	Details available HIGH (8.5) Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers. Published: 2025-08-04T00:00:00.000Z Updated: 2025-11-03T20:04:14.322Z Open on db.gcve.eu Reference links https://kb.cert.org/vuls/id/613753 https://webresources.commscope.com/download/assets/FAQ+Security+Advisory%3A+ID+20250710/225f44ac3bd311f095821adcaa92e24e https://claroty.com/team82/disclosure-dashboard/cve-2025-44957	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-44954`	not_vulnerable	2026-06-08 07:25:10.897256	Details available CRITICAL (9) RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account. Published: 2025-08-04T00:00:00.000Z Updated: 2025-08-05T17:43:44.355Z Open on db.gcve.eu Reference links https://kb.cert.org/vuls/id/613753 https://webresources.commscope.com/download/assets/FAQ+Security+Advisory%3A+ID+20250710/225f44ac3bd311f095821adcaa92e24e https://claroty.com/team82/disclosure-dashboard/cve-2025-44954	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.