CVE-2025-44961: OS Command Injection
Published Aug 4, 2025
·Updated
In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user.
Affected Software
37 affected components
Ruckus SmartZone<6.1.2p3
All of the following
Any of the following
CommScope Ruckus Smartzone Firmware<6.1.2
CommScope Ruckus Smartzone Firmware=6.1.2
CommScope Ruckus Smartzone Firmware=6.1.2-p2
CommScope Ruckus Smartzone Firmware=6.1.2-p3
CommScope Ruckus Smartzone Firmware=7.0.0
CommScope Ruckus Smartzone Firmware=7.1.0
Any of the following
CommScope Ruckus Virtual Smartzone
CommScope Ruckus Virtual Smartzone-federal
CommScope Ruckus C110
CommScope Ruckus E510
CommScope Ruckus H320
CommScope Ruckus H350
CommScope Ruckus H510
CommScope Ruckus M510
CommScope Ruckus R320
CommScope Ruckus R510
CommScope Ruckus R560
CommScope Ruckus R610
CommScope Ruckus R710
CommScope Ruckus R720
CommScope Ruckus R730
CommScope Ruckus R750
CommScope Ruckus Smartzone 100
CommScope Ruckus Smartzone 100-d
CommScope Ruckus Smartzone 144
CommScope Ruckus Smartzone 144-federal
CommScope Ruckus Smartzone 300
CommScope Ruckus Smartzone 300-federal
CommScope Ruckus T310c
CommScope Ruckus T310d
CommScope Ruckus T310n
CommScope Ruckus T310s
CommScope Ruckus T350se
CommScope Ruckus T750
CommScope Ruckus T750se
CommScope Ruckus Network Director<4.5.0.51
Event History
Aug 4, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-44961?
CVE-2025-44961 has been classified as a high-severity vulnerability due to its potential for OS command injection.
2
How do I fix CVE-2025-44961?
To fix CVE-2025-44961, upgrade RUCKUS SmartZone to version 6.1.2p3 or later.
3
What software is affected by CVE-2025-44961?
CVE-2025-44961 affects RUCKUS SmartZone versions prior to 6.1.2p3.
4
Can CVE-2025-44961 be exploited remotely?
CVE-2025-44961 can be exploited by authenticated users through input in an IP address field.
5
Who should be concerned about CVE-2025-44961?
Organizations using affected versions of RUCKUS SmartZone should prioritize addressing CVE-2025-44961 to avoid potential exploitation.