← Database

CVE-2025-46117

CRITICAL CVSS: 9.1 Published: 2025-07-21 Modified: 2026-06-17

Description

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.1.0.279, where a hidden debug script `.ap_debug.sh` invoked from the restricted CLI does not properly sanitize its input, allowing an authenticated attacker to execute arbitrary commands as root on the controller or specified target.

Affected Platforms

Commscope Ruckus R710Commscope Ruckus T670Commscope Ruckus T811-Cm \(Non-Sfp\)Commscope Ruckus R320Commscope Ruckus T350DCommscope Ruckus R350ECommscope Ruckus T750Commscope Ruckus T750SeCommscope Ruckus R610Ruckuswireless Ruckus Zonedirector

Weakness Type

CWE-78

References