Ruckus Wireless Ruckus Zonedirector vulnerabilities

8 CVEs affecting Ruckus Wireless Ruckus Zonedirector, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-46123, published 2025-07-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-46121, published 2025-07-21. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, where the functions `stamgr_cfg_adpt_addStaFavourite` and `stamgr_cfg_adpt_addStaIot` pass a client…
CVE-2025-46122, published 2025-07-21. Critical severity, CVSS 9.1. EPSS: 1.1% chance of exploitation in the next 30 days. An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, where the authenticated diagnostics API endpoint `/admin/_cmdstat.jsp` passes attacker-controlled…
CVE-2025-46123, published 2025-07-21. High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days. An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.1.0.279, where the authenticated configuration endpoint…
CVE-2025-46120, published 2025-07-21. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.27 and 200.18.7.1.323, and in Ruckus ZoneDirector prior to 10.5.1.0.282, where a path-traversal flaw in the web interface…
CVE-2025-46117, published 2025-07-21. Critical severity, CVSS 9.1. EPSS: 0.8% chance of exploitation in the next 30 days. An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.1.0.279, where a hidden debug script `.ap_debug.sh` invoked…
CVE-2025-46118, published 2025-07-21. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139 and in Ruckus ZoneDirector prior to 10.5.1.0.279, where hard-coded credentials for the ftpuser…
CVE-2025-46116, published 2025-07-21. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.1.0.279, where an authenticated attacker can disable the…
CVE-2025-46119, published 2025-07-21. Medium severity, CVSS 6.3. EPSS: 0.4% chance of exploitation in the next 30 days. An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.27 and 200.18.7.1.323, and in Ruckus ZoneDirector prior to 10.5.1.0.282, where an authenticated request to the management…