Ruckus Wireless Ruckus Unleashed vulnerabilities
9 CVEs affecting Ruckus Wireless Ruckus Unleashed, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-63735, published 2025-11-25.
More from Ruckus Wireless.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2025-46121, published 2025-07-21. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, where the functions `stamgr_cfg_adpt_addStaFavourite` and `stamgr_cfg_adpt_addStaIot` pass a client…
- CVE-2025-46122, published 2025-07-21. Critical severity, CVSS 9.1. EPSS: 1.1% chance of exploitation in the next 30 days. An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, where the authenticated diagnostics API endpoint `/admin/_cmdstat.jsp` passes attacker-controlled…
- CVE-2025-46123, published 2025-07-21. High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days. An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.1.0.279, where the authenticated configuration endpoint…
- CVE-2025-46120, published 2025-07-21. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.27 and 200.18.7.1.323, and in Ruckus ZoneDirector prior to 10.5.1.0.282, where a path-traversal flaw in the web interface…
- CVE-2025-46117, published 2025-07-21. Critical severity, CVSS 9.1. EPSS: 0.8% chance of exploitation in the next 30 days. An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.1.0.279, where a hidden debug script `.ap_debug.sh` invoked…
- CVE-2025-46118, published 2025-07-21. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139 and in Ruckus ZoneDirector prior to 10.5.1.0.279, where hard-coded credentials for the ftpuser…
- CVE-2025-46116, published 2025-07-21. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.1.0.279, where an authenticated attacker can disable the…
- CVE-2025-46119, published 2025-07-21. Medium severity, CVSS 6.3. EPSS: 0.4% chance of exploitation in the next 30 days. An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.27 and 200.18.7.1.323, and in Ruckus ZoneDirector prior to 10.5.1.0.282, where an authenticated request to the management…
- CVE-2025-63735, published 2025-11-25. Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days. A reflected Cross site scripting (XSS) vulnerability in Ruckus Unleashed 200.13.6.1.319 via the name parameter to the the captive-portal endpoint selfguestpass/guestAccessSubmit.jsp.