← Database

CVE-2025-46116

HIGH CVSS: 8.8 Published: 2025-07-21 Modified: 2026-06-17

Description

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.1.0.279, where an authenticated attacker can disable the passphrase requirement for a hidden CLI command `!v54!` via a management API call and then invoke it to escape the restricted shell and obtain a root shell on the controller.

Affected Platforms

Commscope Ruckus R710Commscope Ruckus T670Commscope Ruckus T811-Cm \(Non-Sfp\)Commscope Ruckus R320Commscope Ruckus T350DCommscope Ruckus R350ECommscope Ruckus T750Commscope Ruckus T750SeCommscope Ruckus R610Ruckuswireless Ruckus Zonedirector

Weakness Type

CWE-250, CWE-269

References