ruckus wireless

Top products

The 12 most recently published vulnerabilities affecting ruckus wireless.

• CVE-2021-4474Ruckus AP CLI Arbitrary File Read Allows Authenticated Remote File Access4.9Mar 26, 2026
• CVE-2025-6243Уязвимость программного обеспечения для централизованного управления сетевой инфраструктурой Ruckus Network Director, связанная с использованием жестко закодированного криптографического ключа, позволяющая нарушителю обойти существующие ограничения безопасности и повысить свои привилегии8.8Jan 9, 2026
• CVE-2025-44955RUCKUS Network Director (RND) before 4.5 allows jailed users to obtain root access vis a weak, hardcoded password.8.8Aug 4, 2025
• CVE-2025-44958RUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format.5.3Aug 4, 2025
• CVE-2025-44961In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user.9.9Aug 4, 2025
• CVE-2025-44954RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account.9.0Aug 4, 2025
• CVE-2025-44960RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route.8.5Aug 4, 2025
• CVE-2025-44962RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files.5.0Aug 4, 2025
• CVE-2025-44957Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers.8.5Aug 4, 2025
• CVE-2025-44963RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded value of a certain secret key.9.0Aug 4, 2025
• BDU:2024-10300Уязвимость сетевых устройств RUCKUS Wireless Access Points (Ruckus AP), связанная с недостаточной проверкой входных данных, позволяющая нарушителю выполнить произвольный код9.8Nov 26, 2024
• CVE-2023-25717Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.KEV9.8Feb 13, 2023