8.5High
CVE-2025-44957
Description
Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers.
Weakness (CWE):
CWE-288
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| commscope | ruckus network director | < 4.5.0.51 | |
| commscope | ruckus smartzone firmware | < 6.1.2 | |
| RUCKUS | SmartZone | < 6.1.2p3 Refresh Build |
References and patches
- https://kb.cert.org/vuls/id/613753 Third Party AdvisoryUS Government Resource
- https://webresources.commscope.com/download/assets/FAQ+Security+Advisory%3A+ID+20250710/225f44ac3bd311f095821… Vendor Advisory
- https://claroty.com/team82/disclosure-dashboard/cve-2025-44957 Third Party Advisory
- https://www.kb.cert.org/vuls/id/613753
CPE matches (NVD) (7)
cpe:2.3:o:commscope:ruckus_smartzone_firmware:*:*:*:*:*:*:*:*< 6.1.2cpe:2.3:o:commscope:ruckus_smartzone_firmware:6.1.2:-:*:*:*:*:*:*cpe:2.3:o:commscope:ruckus_smartzone_firmware:6.1.2:p2:*:*:*:*:*:*cpe:2.3:o:commscope:ruckus_smartzone_firmware:6.1.2:p3:*:*:*:*:*:*cpe:2.3:o:commscope:ruckus_smartzone_firmware:7.0.0:*:*:*:*:*:*:*cpe:2.3:o:commscope:ruckus_smartzone_firmware:7.1.0:*:*:*:*:*:*:*cpe:2.3:a:commscope:ruckus_network_director:*:*:*:*:*:*:*:*< 4.5.0.51