Skip to content
CVE PROGRAM SOURCE RECORD9.9 Critical

CVE-2025-44961

In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user.

Description

In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

RUCKUS SmartZone

Default version status: unknown

  • 0 to < 6.1.2p3 Refresh Buildaffected

References