← Database

CVE-2025-44961

CRITICAL CVSS: 9.9 Published: 2025-08-04 Modified: 2026-06-17

Description

In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user.

Affected Platforms

Commscope Ruckus R710Commscope Ruckus Virtual Smartzone-FederalCommscope Ruckus Smartzone 144Commscope Ruckus R320Commscope Ruckus Smartzone 300Commscope Ruckus T750Commscope Ruckus T750SeCommscope Ruckus Virtual SmartzoneCommscope Ruckus R610Commscope Ruckus T350Se

Weakness Type

CWE-78

References