Priority LOW 31
Ruckus Access Point products contain an arbitrary file read vulnerability in the command-line interface that allows authenticated remote attackers with administrative privileges to read arbitrary files from the underlyin…
CVSS 4.0MEDIUM 6.9· Network · High privileges · No interaction · EPSS 0.00465 · Published 2026-03-26 · No fix listed CWE-552
Priority MEDIUM 42
RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded value of a certain secret key.
CVSS 3.1CRITICAL 9.0· Network · No auth · No interaction · EPSS 0.00644 · Published 2025-08-04 · Fixed in 4.5 CWE-321
Priority LOW 24
RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files.
CVSS 3.1MEDIUM 5.0· Network · Low privileges · No interaction · EPSS 0.00858 · Published 2025-08-04 · Fixed in 6.1.2p3 Refresh Build CWE-24
Priority MEDIUM 47
In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user.
CVSS 3.1CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.02055 · Published 2025-08-04 · Fixed in 6.1.2p3 Refresh Build CWE-78
Priority MEDIUM 44
RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01782 · Published 2025-08-04 · Fixed in 6.1.2p3 Refresh Build CWE-78
Priority LOW 33
RUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0036 · Published 2025-08-04 · Fixed in 4.5 CWE-257
Priority MEDIUM 42
Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01123 · Published 2025-08-04 · Fixed in 6.1.2p3 Refresh Build CWE-288
Priority MEDIUM 41
RUCKUS Network Director (RND) before 4.5 allows jailed users to obtain root access vis a weak, hardcoded password.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00485 · Published 2025-08-04 · Fixed in 4.5 CWE-259
Priority MEDIUM 44
RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00746 · Published 2025-08-04 · Fixed in 6.1.2p3 Refresh Build CWE-1394
Priority MEDIUM 41
Ruckus Wireless Zone Director Controller firmware releases ZD9.9.x, ZD9.10.x, ZD9.13.0.x less than 9.13.0.0.232 contain OS Command Injection vulnerabilities in the ping functionality that could allow local authenticated…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.0172 · Published 2017-10-13 · No fix listed CWE-78
Priority LOW 35
Ruckus Wireless H500 web management interface denial of service
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.0106 · Published 2016-10-25 · No fix listed
Priority LOW 26
Ruckus Wireless H500 web management interface authentication bypass
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01078 · Published 2016-10-25 · No fix listed CWE-200
Priority LOW 38
Ruckus Wireless H500 web management interface CSRF
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.00452 · Published 2016-10-25 · No fix listed CWE-352
Priority MEDIUM 48
Ruckus Wireless H500 web management interface authenticated command injection
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.06722 · Published 2016-10-10 · No fix listed CWE-78
THREATIST.IORead the docs