Description
RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| RUCKUS | SmartZone | < 6.1.2p3 Refresh Build | 6.1.2p3 Refresh Build |
High · 8.5
CVE-2025-44960
EUVD-2025-23523GHSA-8v65-3h9x-p2qp
RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route.
Published Aug 4, 2025 · Updated Nov 3, 2025 · Assigned by mitre