Ruckus vulnerabilities
14 vulnerabilities
Known vulnerabilities in Ruckus products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 11 products.
Products
11- Smartzone5 vulnerabilities
- Wireless H5004 vulnerabilities
- Network Director3 vulnerabilities
- Ruckus Unleashed1 vulnerabilities
- Smartzone 100 (SZ 100) (Eol)1 vulnerabilities
- Smartzone 100 D (Sz100 D) (Eol)1 vulnerabilities
- Smartzone 144 (SZ 144)1 vulnerabilities
- Smartzone 144 Dataplane (Sz144 D)1 vulnerabilities
- Smartzone 300 (Sz300) (Eol)1 vulnerabilities
- Zonedirector1 vulnerabilities
- Zonedirector 1200 (Eol)1 vulnerabilities
CVE-2021-4474ruckus wirelessruckus access point+7
EPSS score0.46%
Ruckus Access Point products contain an arbitrary file read vulnerability in the command-line interface that allows authenticated remote attackers with administrative privileges to read arbitrary files from the underlying filesystem. Attackers can exploit this vulnerability to access sensitive information including configuration files, credentials, and system data stored on the device.CVE-2016-1000214ruckuswireless_h500EPSS score1.08%
Ruckus Wireless H500 web management interface authentication bypassCVE-2016-1000215ruckuswireless_h500EPSS score1.06%
Ruckus Wireless H500 web management interface denial of serviceCVE-2016-1000213ruckuswireless_h500EPSS score0.45%
Ruckus Wireless H500 web management interface CSRFCVE-2016-1000216ruckuswireless_h500EPSS score6.72%
Ruckus Wireless H500 web management interface authenticated command injectionCVE-2025-44963commscoperuckus_network_director+1EPSS score0.63%
RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded value of a certain secret key.CVE-2025-44961commscoperuckus_network_director+2EPSS score2.12%
In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user.CVE-2025-44962commscoperuckus_network_director+2EPSS score0.82%
RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files.CVE-2025-44958commscoperuckus_network_director+1EPSS score0.34%
RUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format.CVE-2025-44957commscoperuckus_network_director+2EPSS score0.98%
Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers.CVE-2025-44960commscoperuckus_network_director+2EPSS score1.84%
RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route.CVE-2025-44955commscoperuckus_network_director+1EPSS score0.48%
RUCKUS Network Director (RND) before 4.5 allows jailed users to obtain root access vis a weak, hardcoded password.CVE-2025-44954commscoperuckus_smartzone_firmware+1EPSS score0.73%
RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account.CVE-2017-6223brocade communications systems, inc.zone director controller firmware+1EPSS score1.72%
Ruckus Wireless Zone Director Controller firmware releases ZD9.9.x, ZD9.10.x, ZD9.13.0.x less than 9.13.0.0.232 contain OS Command Injection vulnerabilities in the ping functionality that could allow local authenticated users to execute arbitrary privileged commands on the underlying operating system.