CommScope, Inc.

Records55All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical26CVSS 9.0–10.0

CVSS high18CVSS 7.0–8.9

Exploited now

CommScope, Inc. records in CISA KEV

TI-2023-10993 Multiple Ruckus Wireless Products CSRF and RCE Vulnerability CRITICAL 100KEV 2023-05-12

Components

Products in the NVD configurations · select one to filter the records

Ruckus Network Director 9 records HIGH Arris Tg1682g Firmware 8 records MEDIUM Arris Tr3300 Firmware 8 records MEDIUM Ruckus Iot Controller 7 records HIGH Ruckus Smartzone Firmware 6 records CRITICAL Ruckus Zoneflex R500 Firmware 3 records LOW Arris Surfboard Sb8200 Firmware 2 records LOW Arris Surfboard Sbg6950ac2 Firmware 2 records MEDIUM

Records

6 records in Ruckus Smartzone Firmware · all components

TI-2023-10993 CVE-2023-25717 · GHSA-53wx-2f9c-xxxr

Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated…

CRITICAL 100KEV

Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.98069 Published 2023-02-13 No fix listed CWE-94

TI-2025-28707 CVE-2025-44961 · GHSA-pxq8-xx7h-h878

OS command injection in RUCKUS SmartZone

MEDIUM 47

In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.02055 Published 2025-08-04 Fixed in 6.1.2p3 Refresh Build CWE-78

TI-2025-28706 CVE-2025-44960 · GHSA-8v65-3h9x-p2qp

RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route.

MEDIUM 44

RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01782 Published 2025-08-04 Fixed in 6.1.2p3 Refresh Build CWE-78

TI-2025-28702 CVE-2025-44954 · GHSA-26hc-78hm-m2x7

RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account.

MEDIUM 44

RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00746 Published 2025-08-04 Fixed in 6.1.2p3 Refresh Build CWE-1394

TI-2025-28704 CVE-2025-44957 · GHSA-fwg7-h82p-gx66

Authentication bypass in RUCKUS SmartZone

MEDIUM 42

Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01123 Published 2025-08-04 Fixed in 6.1.2p3 Refresh Build CWE-288

TI-2025-28708 CVE-2025-44962 · GHSA-cjx4-rqcr-jjmh

RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files.

LOW 24

RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00858 Published 2025-08-04 Fixed in 6.1.2p3 Refresh Build CWE-24

Open these records in search →