PatchTheCVEcommscope vulnerabilities
Recent CVEs affecting commscope products. 8 tracked.
commscope has 8 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 8. Most recent: 2025-08-04. Highest priority: CVE-2025-44961 (score 55/100).
- CVE-2025-44963 CRITICAL 9.0 UPGRADE RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the
- CVE-2025-44962 MEDIUM 5.0 UPGRADE UPGRADE RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files.
- CVE-2025-44961 CRITICAL 9.9 UPGRADE UPGRADE In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field
- CVE-2025-44960 HIGH 8.5 UPGRADE UPGRADE RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an A
- CVE-2025-44958 MEDIUM 5.3 UPGRADE RUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format.
- CVE-2025-44957 HIGH 8.5 UPGRADE UPGRADE Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafte
- CVE-2025-44955 HIGH 8.8 UPGRADE RUCKUS Network Director (RND) before 4.5 allows jailed users to obtain root access vis a weak, hardcoded passw
- CVE-2025-44954 CRITICAL 9.0 UPGRADE RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user
FAQ
How do I fix commscope vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is commscope being exploited right now?
None of the tracked commscope CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which commscope CVE should I patch first?
CVE-2025-44961 currently ranks highest (55/100): In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field .