Ruckus
14 CVEs across 12 Ruckus products. Browse Ruckus vulnerabilities, severities, and proof-of-concept exploits.
Ruckus products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-4474 | Medium | 4.9 | 2026-03-26 | Ruckus Access Point products contain an arbitrary file read vulnerability in the command-line interface that allows authenticated remote attackers with adminis… |
CVE-2025-44963 | Critical | 9.0 | 2025-08-04 | RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded value of a certain secret key. |
CVE-2025-44962 | Medium | 5.0 | 2025-08-04 | RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files. |
CVE-2025-44961 | Critical | 9.9 | 2025-08-04 | In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user. |
CVE-2025-44960 | High | 8.5 | 2025-08-04 | RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route. |
CVE-2025-44958 | Medium | 5.3 | 2025-08-04 | RUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format. |
CVE-2025-44957 | High | 8.5 | 2025-08-04 | Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers. |
CVE-2025-44954 | Critical | 9.0 | 2025-08-04 | RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account. |
CVE-2025-44955 | High | 8.8 | 2025-08-04 | RUCKUS Network Director (RND) before 4.5 allows jailed users to obtain root access vis a weak, hardcoded password. |
CVE-2017-6223 | High | 8.8 | 2017-10-13 | Ruckus Wireless Zone Director Controller firmware releases ZD9.9.x, ZD9.10.x, ZD9.13.0.x less than 9.13.0.0.232 contain OS Command Injection vulnerabilities in… |
CVE-2016-1000215 | High | 7.5 | 2016-10-25 | Ruckus Wireless H500 web management interface denial of service |
CVE-2016-1000214 | Medium | 5.3 | 2016-10-25 | Ruckus Wireless H500 web management interface authentication bypass |
CVE-2016-1000213 | High | 8.8 | 2016-10-25 | Ruckus Wireless H500 web management interface CSRF |
CVE-2016-1000216 | High | 8.8 | 2016-10-10 | Ruckus Wireless H500 web management interface authenticated command injection |