ruckus smartzone firmware vulnerabilities and fixes

Recent CVEs affecting ruckus smartzone firmware, with upgrade or downgrade steps. 5 tracked.

Also searched as: ruckussmartzonefirmware.

ruckus smartzone firmware has 5 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 5. Most recent: 2025-08-04. Highest priority: CVE-2025-44961 (score 55/100).

• CVE-2025-44962 MEDIUM 5.0 UPGRADE UPGRADE RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files.
• CVE-2025-44961 CRITICAL 9.9 UPGRADE UPGRADE In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field
• CVE-2025-44960 HIGH 8.5 UPGRADE UPGRADE RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an A
• CVE-2025-44957 HIGH 8.5 UPGRADE UPGRADE Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafte
• CVE-2025-44954 CRITICAL 9.0 UPGRADE RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user

FAQ

How do I fix ruckus smartzone firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is ruckus smartzone firmware being exploited right now?

None of the tracked ruckus smartzone firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which ruckus smartzone firmware CVE should I patch first?

CVE-2025-44961 currently ranks highest (55/100): In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field .

RSS feed for ruckus smartzone firmware · ← Back to latest CVEs