CVE-2025-44957: High severity Ruckus SmartZone (SZ) vulnerability
Published Aug 4, 2025
·Updated
Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers.
Affected Software
37 affected components
Ruckus SmartZone (SZ)<6.1.2p3
All of the following
Any of the following
CommScope Ruckus Smartzone Firmware<6.1.2
CommScope Ruckus Smartzone Firmware=6.1.2
CommScope Ruckus Smartzone Firmware=6.1.2-p2
CommScope Ruckus Smartzone Firmware=6.1.2-p3
CommScope Ruckus Smartzone Firmware=7.0.0
CommScope Ruckus Smartzone Firmware=7.1.0
Any of the following
CommScope Ruckus Virtual Smartzone
CommScope Ruckus Virtual Smartzone-federal
CommScope Ruckus C110
CommScope Ruckus E510
CommScope Ruckus H320
CommScope Ruckus H350
CommScope Ruckus H510
CommScope Ruckus M510
CommScope Ruckus R320
CommScope Ruckus R510
CommScope Ruckus R560
CommScope Ruckus R610
CommScope Ruckus R710
CommScope Ruckus R720
CommScope Ruckus R730
CommScope Ruckus R750
CommScope Ruckus Smartzone 100
CommScope Ruckus Smartzone 100-d
CommScope Ruckus Smartzone 144
CommScope Ruckus Smartzone 144-federal
CommScope Ruckus Smartzone 300
CommScope Ruckus Smartzone 300-federal
CommScope Ruckus T310c
CommScope Ruckus T310d
CommScope Ruckus T310n
CommScope Ruckus T310s
CommScope Ruckus T350se
CommScope Ruckus T750
CommScope Ruckus T750se
CommScope Ruckus Network Director<4.5.0.51
Event History
Aug 4, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-44957?
CVE-2025-44957 is considered critical due to its ability to allow authentication bypass with a valid API key.
2
How do I fix CVE-2025-44957?
To fix CVE-2025-44957, upgrade Ruckus SmartZone (SZ) to version 6.1.2p3 or later.
3
Who is affected by CVE-2025-44957?
CVE-2025-44957 affects Ruckus SmartZone (SZ) versions prior to 6.1.2p3 Refresh Build.
4
What kind of attack does CVE-2025-44957 enable?
CVE-2025-44957 enables attackers to bypass authentication by using a valid API key and manipulated HTTP headers.
5
How can I check if my system is impacted by CVE-2025-44957?
Check the version of Ruckus SmartZone (SZ) you are using; if it's below 6.1.2p3, your system is impacted.