TI-2016-09345 CVE-2016-1000216 · GHSA-66j4-c493-mf9v
Ruckus Wireless H500 web management interface authenticated command injection
Priority MEDIUM 48
Ruckus Wireless H500 web management interface authenticated command injection
RUCKUS
Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9
Exploited now
RUCKUS records in CISA KEVNo RUCKUS vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
14 records
TI-2025-28707 CVE-2025-44961 · GHSA-pxq8-xx7h-h878
OS command injection in RUCKUS SmartZone
Priority MEDIUM 47
In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user.
TI-2025-28706 CVE-2025-44960 · GHSA-8v65-3h9x-p2qp
RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route.
Priority MEDIUM 44
RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route.
TI-2025-28702 CVE-2025-44954 · GHSA-26hc-78hm-m2x7
RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account.
Priority MEDIUM 44
RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account.
TI-2025-28709 CVE-2025-44963 · GHSA-rvv9-grwc-5c44
RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an…
Priority MEDIUM 42
RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded value of a certain secret key.
TI-2025-28704 CVE-2025-44957 · GHSA-fwg7-h82p-gx66
Authentication bypass in RUCKUS SmartZone
Priority MEDIUM 42
Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers.
TI-2025-28703 CVE-2025-44955 · GHSA-6674-2jwv-xg4q
RUCKUS Network Director (RND) before 4.5 allows jailed users to obtain root access vis a weak, hardcoded password.
Priority MEDIUM 41
RUCKUS Network Director (RND) before 4.5 allows jailed users to obtain root access vis a weak, hardcoded password.
TI-2017-04075 CVE-2017-6223 · GHSA-9p62-qh48-3frr
OS command injection in Brocade Zone Director Controller Firmware
Priority MEDIUM 41
Ruckus Wireless Zone Director Controller firmware releases ZD9.9.x, ZD9.10.x, ZD9.13.0.x less than 9.13.0.0.232 contain OS Command Injection vulnerabilities in the ping functionality that could allow local authenticated…
TI-2016-09342 CVE-2016-1000213 · GHSA-6jc8-fxhq-65rx
Ruckus Wireless H500 web management interface CSRF
Priority LOW 38
Ruckus Wireless H500 web management interface CSRF
TI-2016-09344 CVE-2016-1000215 · GHSA-7jgc-3xcq-g77g
Ruckus Wireless H500 web management interface denial of service
Priority LOW 35
Ruckus Wireless H500 web management interface denial of service
TI-2025-28705 CVE-2025-44958 · GHSA-q79x-49vq-539x
RUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format.
Priority LOW 33
RUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format.
TI-2021-03330 CVE-2021-4474 · GHSA-f4qw-wcqm-7c8g
Ruckus AP CLI Arbitrary File Read Allows Authenticated Remote File Access
Priority LOW 31
Ruckus Access Point products contain an arbitrary file read vulnerability in the command-line interface that allows authenticated remote attackers with administrative privileges to read arbitrary files from the underlyin…
TI-2016-09343 CVE-2016-1000214 · GHSA-p8gq-6g4j-hh3f
Ruckus Wireless H500 web management interface authentication bypass
Priority LOW 26
Ruckus Wireless H500 web management interface authentication bypass
TI-2025-28708 CVE-2025-44962 · GHSA-cjx4-rqcr-jjmh
RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files.
Priority LOW 24
RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files.