Skip to content
OpenAdvisories

Vendor

RUCKUS

12 known vulnerabilities.

RUCKUS at a glance

Last 12 months
4
Critical · all time
5
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 2 December 2025: 0 vulnerabilities Dec 2025 January 2026: 2 vulnerabilities, 2 critical February 2026: 0 vulnerabilities March 2026: 2 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202620
Feb 202600
Jan 202622
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202583
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

SmartZone 5 Network Director 3 RUCKUS Unleashed 2 vRIoT IOT Controller 2 SmartZone 100 (SZ-100) (EOL) 1 SmartZone 100-D (SZ100-D) (EOL) 1 SmartZone 144 (SZ-144) 1 SmartZone 144-Dataplane (SZ144-D) 1 SmartZone 300 (SZ300) (EOL) 1 ZoneDirector 1200 (EOL) 1 RUCKUS H350 1 RUCKUS H550 1 RUCKUS R350 1 RUCKUS R550 1 RUCKUS R650 1 RUCKUS R750 1 RUCKUS R850 1 RUCKUS T350c 1 RUCKUS T350d 1 RUCKUS T350se 1 RUCKUS T750 1 RUCKUS T750SE 1 Ruckus C110 1 Ruckus E510 1 Ruckus H320 1 Ruckus H510 1 Ruckus M510-JP 1 Ruckus R320 1 Ruckus R510 1 Ruckus R610 1 Ruckus R710 1 Ruckus R720 1 Ruckus T310c 1 Ruckus T310d 1 Ruckus T310n 1 Ruckus T310s 1 Ruckus T610 1 Ruckus T710 1 Ruckus T710s 1
All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • Medium 4.9
    CVE-2021-4474

    Ruckus AP CLI Arbitrary File Read Allows Authenticated Remote File Access

    Ruckus Access Point products contain an arbitrary file read vulnerability in the command-line interface that allows authenticated remote attackers with administrative privileges to read arbitrary files from the underlying filesystem. Attackers can exploit thi…

    RUCKUS Ruckus Wireless RUCKUS Unleashed SmartZone 100-D (SZ100-D) (EOL)
  • High 7.5
    CVE-2023-7338

    Ruckus Unleashed Authenticated RCE in Gateway Mode

    Ruckus Unleashed contains a remote code execution vulnerability in the web-based management interface that allows authenticated remote attackers to execute arbitrary code on the system when gateway mode is enabled. Attackers can exploit this vulnerability by …

    RUCKUS RUCKUS Unleashed Ruckus H320 Ruckus T310d
  • Critical 10.0
    CVE-2025-69426

    Ruckus vRIoT IoT Controller < 3.0.0.0 Hardcoded SSH Credentials RCE

    The Ruckus vRIoT IoT Controller firmware versions prior to 3.0.0.0 (GA) contain hardcoded credentials for an operating system user account within an initialization script. The SSH service is network-accessible without IP-based restrictions. Although the confi…

    RUCKUS vRIoT IOT Controller
  • Critical 10.0
    CVE-2025-69425

    Ruckus vRIoT IoT Controller < 3.0.0.0 Hardcoded Tokens RCE

    The Ruckus vRIoT IoT Controller firmware versions prior to 3.0.0.0 (GA) expose a command execution service on TCP port 2004 running with root privileges. Authentication to this service relies on a hardcoded Time-based One-Time Password (TOTP) secret and an em…

    RUCKUS vRIoT IOT Controller
  • High 8.5
    CVE-2025-44960

    RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route.

    RUCKUS SmartZone
  • Critical 9.0
    CVE-2025-44963

    RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded…

    RUCKUS Network Director
  • Critical 9.0
    CVE-2025-44954

    RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account.

    RUCKUS SmartZone
  • Critical 9.9
    CVE-2025-44961

    In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided …

    RUCKUS SmartZone
  • High 8.5
    CVE-2025-44957

    Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP he…

    RUCKUS SmartZone
  • Medium 5.3
    CVE-2025-44958

    RUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format.

    RUCKUS Network Director
  • High 8.8
    CVE-2025-44955

    RUCKUS Network Director (RND) before 4.5 allows jailed users to obtain root access vis a weak, hardcoded password.

    RUCKUS Network Director
  • Medium 5.0
    CVE-2025-44962

    RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files.

    RUCKUS SmartZone