ruckus network director vulnerabilities and fixes

Recent CVEs affecting ruckus network director, with upgrade or downgrade steps. 7 tracked.

Also searched as: ruckusnetworkdirector.

ruckus network director has 7 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 7. Most recent: 2025-08-04. Highest priority: CVE-2025-44961 (score 55/100).

• CVE-2025-44963 CRITICAL 9.0 UPGRADE RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the
• CVE-2025-44962 MEDIUM 5.0 UPGRADE UPGRADE RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files.
• CVE-2025-44961 CRITICAL 9.9 UPGRADE UPGRADE In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field
• CVE-2025-44960 HIGH 8.5 UPGRADE UPGRADE RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an A
• CVE-2025-44958 MEDIUM 5.3 UPGRADE RUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format.
• CVE-2025-44957 HIGH 8.5 UPGRADE UPGRADE Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafte
• CVE-2025-44955 HIGH 8.8 UPGRADE RUCKUS Network Director (RND) before 4.5 allows jailed users to obtain root access vis a weak, hardcoded passw

FAQ

How do I fix ruckus network director vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is ruckus network director being exploited right now?

None of the tracked ruckus network director CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which ruckus network director CVE should I patch first?

CVE-2025-44961 currently ranks highest (55/100): In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field .

RSS feed for ruckus network director · ← Back to latest CVEs