PT-2025-28948 · Ruckus · Ruckus Smartzone

Noam Moshe · Published 2025-07-08 · Updated 2025-08-04 · CVE-2025-44957

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Ruckus SmartZone versions prior to 6.1.2p3 Refresh Build

Description The software allows authentication bypass via a valid API key and crafted HTTP headers. This issue affects enterprise wireless networks.

Recommendations Update to version 6.1.2p3 Refresh Build or later.

Fix

Authentication Bypass Using an Alternate Path or Channel

Improper Authentication

Weakness Enumeration

CWE-288

CWE-287

Related Identifiers

BDU:2026-00179

CVE-2025-44957

Affected Products

Ruckus Smartzone

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2025-44957 · Security Note
• https://webresources.commscope.com/download/assets/FAQ+Security+Advisory%3A+ID+20250710/225f44ac3bd311f095821adcaa92e24e · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-44957 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-00179 · Security Note
• https://kb.cert.org/vuls/id/613753 · Note
• https://t.me/true_secator/7211 · Telegram Post
• https://claroty.com/team82/disclosure-dashboard/cve-2025-44957 · Note
• https://twitter.com/CveFindCom/status/1952417119875781043 · Twitter Post
• https://t.me/CVEtracker/29096 · Telegram Post
• https://twitter.com/CVEnew/status/1952413213485601263 · Twitter Post
• https://twitter.com/ITSPARCCast/status/1944766334757216335 · Twitter Post
• https://cybersecurity-help.cz/vdb/SB2025071034 · Note