PT-2025-28951 · Ruckus · Ruckus Smartzone

Noam Moshe · Published 2025-07-08 · Updated 2025-08-07 · CVE-2025-44961

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions RUCKUS SmartZone (SZ) versions prior to 6.1.2p3 Refresh Build

Description An OS command injection can occur via an IP address field provided by an authenticated user.

Recommendations Update RUCKUS SmartZone (SZ) to version 6.1.2p3 Refresh Build or later.

Fix

OS Command Injection

Command Injection

Weakness Enumeration

CWE-78

CWE-77

Related Identifiers

BDU:2026-00182

CVE-2025-44961

Affected Products

Ruckus Smartzone

References · 13

• https://osv.dev/vulnerability/CVE-2025-44961 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-44961 · Security Note
• https://bdu.fstec.ru/vul/2026-00182 · Security Note
• https://webresources.commscope.com/download/assets/FAQ+Security+Advisory%3A+ID+20250710/225f44ac3bd311f095821adcaa92e24e · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1952446223610188226 · Twitter Post
• https://kb.cert.org/vuls/id/613753 · Note
• https://twitter.com/SecAideInfo/status/1953400066473177586 · Twitter Post
• https://claroty.com/team82/disclosure-dashboard/cve-2025-44961 · Note
• https://t.me/CVEtracker/29099 · Telegram Post
• https://twitter.com/CveFindCom/status/1952409424523411792 · Twitter Post
• https://twitter.com/CVEnew/status/1952413216052523033 · Twitter Post
• https://t.me/true_secator/7211 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2025071034 · Note