Evil-DB LogoEvil-DB
← All CVEs

CVE-2025-44954

critical · 9

RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account.

9
CVSS
0.7%
EPSS (exploit prob.)
53rd
EPSS percentile
2025-08-04
Published

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-1394

Affected products

VendorProductAffected versions
commscoperuckus_smartzone_firmware< 6.1.2
commscoperuckus_smartzone_firmware6.1.2
commscoperuckus_smartzone_firmware6.1.2
commscoperuckus_smartzone_firmware6.1.2
commscoperuckus_smartzone_firmware7.0.0
commscoperuckus_smartzone_firmware7.1.0
commscoperuckus_virtual_smartzoneall versions
commscoperuckus_virtual_smartzone-federalall versions
commscoperuckus_c110all versions
commscoperuckus_e510all versions
commscoperuckus_h320all versions
commscoperuckus_h350all versions
commscoperuckus_h510all versions
commscoperuckus_m510all versions
commscoperuckus_r320all versions
commscoperuckus_r510all versions
commscoperuckus_r560all versions
commscoperuckus_r610all versions
commscoperuckus_r710all versions
commscoperuckus_r720all versions
commscoperuckus_r730all versions
commscoperuckus_r750all versions
commscoperuckus_smartzone_100all versions
commscoperuckus_smartzone_100-dall versions
commscoperuckus_smartzone_144all versions
commscoperuckus_smartzone_144-federalall versions
commscoperuckus_smartzone_300all versions
commscoperuckus_smartzone_300-federalall versions
commscoperuckus_t310call versions
commscoperuckus_t310dall versions
commscoperuckus_t310nall versions
commscoperuckus_t310sall versions
commscoperuckus_t350seall versions
commscoperuckus_t750all versions
commscoperuckus_t750seall versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-44954