Evil-DB LogoEvil-DB
← All CVEs

CVE-2025-44961

critical · 9.9

In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user.

9.9
CVSS
2.1%
EPSS (exploit prob.)
81st
EPSS percentile
2025-08-04
Published

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-78

Affected products

VendorProductAffected versions
commscoperuckus_smartzone_firmware< 6.1.2
commscoperuckus_smartzone_firmware6.1.2
commscoperuckus_smartzone_firmware6.1.2
commscoperuckus_smartzone_firmware6.1.2
commscoperuckus_smartzone_firmware7.0.0
commscoperuckus_smartzone_firmware7.1.0
commscoperuckus_virtual_smartzoneall versions
commscoperuckus_virtual_smartzone-federalall versions
commscoperuckus_c110all versions
commscoperuckus_e510all versions
commscoperuckus_h320all versions
commscoperuckus_h350all versions
commscoperuckus_h510all versions
commscoperuckus_m510all versions
commscoperuckus_r320all versions
commscoperuckus_r510all versions
commscoperuckus_r560all versions
commscoperuckus_r610all versions
commscoperuckus_r710all versions
commscoperuckus_r720all versions
commscoperuckus_r730all versions
commscoperuckus_r750all versions
commscoperuckus_smartzone_100all versions
commscoperuckus_smartzone_100-dall versions
commscoperuckus_smartzone_144all versions
commscoperuckus_smartzone_144-federalall versions
commscoperuckus_smartzone_300all versions
commscoperuckus_smartzone_300-federalall versions
commscoperuckus_t310call versions
commscoperuckus_t310dall versions
commscoperuckus_t310nall versions
commscoperuckus_t310sall versions
commscoperuckus_t350seall versions
commscoperuckus_t750all versions
commscoperuckus_t750seall versions
commscoperuckus_network_director< 4.5.0.51

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-44961