Skip to content
OpenAdvisories
High · 8.8 CVE-2025-46116 EUVD-2025-22093GHSA-53mp-gj4v-gr9v

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5…

Published Jul 21, 2025 · Updated Jul 22, 2025 · Assigned by mitre

Description

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.1.0.279, where an authenticated attacker can disable the passphrase requirement for a hidden CLI command `!v54!` via a management API call and then invoke it to escape the restricted shell and obtain a root shell on the controller.

References