CVE-2025-46121

🗓️ 21 Jul 2025 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 38 Views🌐 WEB

Remote code execution in CommScope Ruckus Unleashed prior to specific versions due to format string flaw.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2025-46121	22 Jul 202507:21	–	circl
CNNVD	CommScope Ruckus Unleashed 安全漏洞	21 Jul 202500:00	–	cnnvd
Cvelist	CVE-2025-46121	21 Jul 202500:00	–	cvelist
EUVD	EUVD-2025-22107	3 Oct 202520:07	–	euvd
NVD	CVE-2025-46121	21 Jul 202515:15	–	nvd
Positive Technologies	PT-2025-30283 · Commscope · Ruckus Unleashed	21 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-46121	23 Jul 202500:57	–	redhatcve
Vulnrichment	CVE-2025-46121	21 Jul 202500:00	–	vulnrichment

NVD

Node

ruckuswireless ruckus_unleashedRange<200.15.6.212.14

ruckuswireless ruckus_unleashedRange200.17–200.17.7.0.139

ruckuswireless ruckus_zonedirectorRange<10.5.1.0.279

AND

commscope ruckus_c110Match-

commscope ruckus_e510Match-

commscope ruckus_h320Match-

commscope ruckus_h350Match-

commscope ruckus_h510Match-

commscope ruckus_h550Match-

commscope ruckus_m510Match-

commscope ruckus_m510-jpMatch-

commscope ruckus_r310Match-

commscope ruckus_r320Match-

commscope ruckus_r350Match-

commscope ruckus_r350eMatch-

commscope ruckus_r510Match-

commscope ruckus_r550Match-

commscope ruckus_r560Match-

commscope ruckus_r610Match-

commscope ruckus_r650Match-

commscope ruckus_r670Match-

commscope ruckus_r710Match-

commscope ruckus_r720Match-

commscope ruckus_r730Match-

commscope ruckus_r750Match-

commscope ruckus_r760Match-

commscope ruckus_r770Match-

commscope ruckus_r850Match-

commscope ruckus_t310cMatch-

commscope ruckus_t310nMatch-

commscope ruckus_t310sMatch-

commscope ruckus_t350cMatch-

commscope ruckus_t350dMatch-

commscope ruckus_t350seMatch-

commscope ruckus_t610Match-

commscope ruckus_t670Match-

commscope ruckus_t710Match-

commscope ruckus_t710sMatch-

commscope ruckus_t750Match-

commscope ruckus_t750seMatch-

commscope ruckus_t811-cmMatch-

commscope ruckus_t811-cm_(non-sfp)Match-

commscope zonedirector_1200Match-

Source	Link
sector7	www.sector7.computest.nl/post/2025-07-ruckus-unleashed/
support	www.support.ruckuswireless.com/security_bulletins/330

Parameter	Position	Path	Description	CWE
hostname	nested	admin/_conf.jsp	Uncontrolled format string vulnerability in DHCP hostname handling leading to arbitrary code execution via format string processing (CWE-134). Attack can be triggered by DHCP hostname field or via authenticated endpoint with crafted input.	CWE-134

17 Jun 2026 09:25Current

7.6High risk

Vulners AI Score7.6

CVSS 3.19.8

EPSS0.01246

SSVC

CWE-134