CVE-2025-44954: Commscope Ruckus Smartzone Firmware

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account.

Affected products

• Commscope Ruckus Smartzone Firmware: before 6.1.2 (fixed in 6.1.2); version 6.1.2 only; version 7.0.0 only; version 7.1.0 only

Published 2025-08-04. Last modified 2026-06-17.