CVE-2025-44960: OS Command Injection
Published Aug 4, 2025
·Updated
RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route.
Affected Software
37 affected components
Ruckus SmartZone<6.1.2p3
All of the following
Any of the following
CommScope Ruckus Smartzone Firmware<6.1.2
CommScope Ruckus Smartzone Firmware=6.1.2
CommScope Ruckus Smartzone Firmware=6.1.2-p2
CommScope Ruckus Smartzone Firmware=6.1.2-p3
CommScope Ruckus Smartzone Firmware=7.0.0
CommScope Ruckus Smartzone Firmware=7.1.0
Any of the following
CommScope Ruckus Virtual Smartzone
CommScope Ruckus Virtual Smartzone-federal
CommScope Ruckus C110
CommScope Ruckus E510
CommScope Ruckus H320
CommScope Ruckus H350
CommScope Ruckus H510
CommScope Ruckus M510
CommScope Ruckus R320
CommScope Ruckus R510
CommScope Ruckus R560
CommScope Ruckus R610
CommScope Ruckus R710
CommScope Ruckus R720
CommScope Ruckus R730
CommScope Ruckus R750
CommScope Ruckus Smartzone 100
CommScope Ruckus Smartzone 100-d
CommScope Ruckus Smartzone 144
CommScope Ruckus Smartzone 144-federal
CommScope Ruckus Smartzone 300
CommScope Ruckus Smartzone 300-federal
CommScope Ruckus T310c
CommScope Ruckus T310d
CommScope Ruckus T310n
CommScope Ruckus T310s
CommScope Ruckus T350se
CommScope Ruckus T750
CommScope Ruckus T750se
CommScope Ruckus Network Director<4.5.0.51
Event History
Aug 4, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-44960?
CVE-2025-44960 is rated as high severity due to the potential for OS command injection.
2
How do I fix CVE-2025-44960?
To fix CVE-2025-44960, upgrade RUCKUS SmartZone to version 6.1.2p3 or later.
3
What kind of vulnerability is CVE-2025-44960?
CVE-2025-44960 is an OS command injection vulnerability in the RUCKUS SmartZone API.
4
Which versions of RUCKUS SmartZone are affected by CVE-2025-44960?
RUCKUS SmartZone versions prior to 6.1.2p3 are affected by CVE-2025-44960.
5
What impact does CVE-2025-44960 have on affected systems?
CVE-2025-44960 can allow attackers to execute arbitrary OS commands on the server hosting RUCKUS SmartZone.