CVE-2025-44961: In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user.

PriorityP261high8.8CVSS 3.1

AVNACLPRLUINSUCHIHAH

EPSS

2.10%

79.3th percentile

In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
commscope	ruckus_network_director	< 4.5.0.51	4.5.0.51
commscope	ruckus_smartzone_firmware	< 6.1.2	6.1.2
commscope	ruckus_smartzone_firmware	—	—
commscope	ruckus_smartzone_firmware	—	—
commscope	ruckus_smartzone_firmware	—	—
ruckus	smartzone	< 6.1.2p3 Refresh Build	6.1.2p3 Refresh Build

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.