CVE-2025-44957

Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2025-08-04

Last modified

2025-11-03

Weaknesses

CWE-288

Affected products

• Ruckus Network Director (Commscope)
• Ruckus Smartzone Firmware (Commscope)
• Smartzone (Ruckus)

References

• https://claroty.com/team82/disclosure-dashboard/cve-2025-44957
• https://kb.cert.org/vuls/id/613753
• https://webresources.commscope.com/download/assets/FAQ+Security+Advisory%3A+ID+20250710/225f44ac3bd311f095821adcaa92e24e
• https://www.kb.cert.org/vuls/id/613753