CVE-2025-44961
8.8 highEPSS 2.1%
High (8.8) in commscope. EPSS 2.1% chance of exploitation in the next 30 days.
In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user.
Severity
CVSS 3.1
8.8 highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H- EPSS
- 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
- CWE
- CWE-78
- Published
- Modified
- Record from
- the NVD, synced
Affected
- commscope:ruckus_network_director
- commscope:ruckus_smartzone_firmware
References
Check your stackJSON