CVE-2025-44954: Critical severity Ruckus SmartZone vulnerability
Published Aug 4, 2025
·Updated
RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account.
Affected Software
36 affected components
Ruckus SmartZone<6.1.2p3
All of the following
Any of the following
CommScope Ruckus Smartzone Firmware<6.1.2
CommScope Ruckus Smartzone Firmware=6.1.2
CommScope Ruckus Smartzone Firmware=6.1.2-p2
CommScope Ruckus Smartzone Firmware=6.1.2-p3
CommScope Ruckus Smartzone Firmware=7.0.0
CommScope Ruckus Smartzone Firmware=7.1.0
Any of the following
CommScope Ruckus Virtual Smartzone
CommScope Ruckus Virtual Smartzone-federal
CommScope Ruckus C110
CommScope Ruckus E510
CommScope Ruckus H320
CommScope Ruckus H350
CommScope Ruckus H510
CommScope Ruckus M510
CommScope Ruckus R320
CommScope Ruckus R510
CommScope Ruckus R560
CommScope Ruckus R610
CommScope Ruckus R710
CommScope Ruckus R720
CommScope Ruckus R730
CommScope Ruckus R750
CommScope Ruckus Smartzone 100
CommScope Ruckus Smartzone 100-d
CommScope Ruckus Smartzone 144
CommScope Ruckus Smartzone 144-federal
CommScope Ruckus Smartzone 300
CommScope Ruckus Smartzone 300-federal
CommScope Ruckus T310c
CommScope Ruckus T310d
CommScope Ruckus T310n
CommScope Ruckus T310s
CommScope Ruckus T350se
CommScope Ruckus T750
CommScope Ruckus T750se
Event History
Jul 9, 2025
News Published
via BleepingComputer·03:42 PM
News Published
via BleepingComputer·03:43 PM
Aug 4, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-44954?
CVE-2025-44954 has a high severity rating due to the presence of a hardcoded SSH private key, which can lead to unauthorized access.
2
How do I fix CVE-2025-44954?
To fix CVE-2025-44954, you should upgrade RUCKUS SmartZone to version 6.1.2p3 or later.
3
What is affected by CVE-2025-44954?
CVE-2025-44954 affects RUCKUS SmartZone versions prior to 6.1.2p3 Refresh Build.
4
What are the risks associated with CVE-2025-44954?
The risks associated with CVE-2025-44954 include potential unauthorized access and control over the RUCKUS SmartZone device.
5
Is there an exploit available for CVE-2025-44954?
While specific exploits are not disclosed, the vulnerability's nature suggests it could be exploited easily by attackers with knowledge of the hardcoded key.