The vulnerabilities of the software for SmartZone, ZoneDirector, and SmartCell Gateway control devices involve loading code without verifying its integrity. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerabilities of the software for SmartZone, ZoneDirector, and SmartCell Gateway controllers are related to the loading of code without checking its integrity. Exploiting these vulnerabilities allows an attacker operating remotely to compromise the confidentiality, integrity, and...

The vulnerabilities of the software for SmartZone, ZoneDirector, and SmartCell Gateway controllers are related to errors in verifying cryptographic signatures. These vulnerabilities allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerabilities of the SmartZone, ZoneDirector, and SmartCell Gateway wireless network controller software are related to errors in checking the cryptographic signature. Exploiting these vulnerabilities can allow an attacker operating remotely to compromise the confidentiality, integrity, and...

Ruckus Wireless多款产品 安全漏洞

Ruckus Wireless SmartZone is a high-performance WLAN controller from Ruckus Technologies. Several products of Ruckus Wireless have security vulnerabilities. These vulnerabilities stem from arbitrary file reading vulnerabilities in the command-line interface, which could allow authenticated remote...

EUVD-2020-15412

Malware in sbrugna...

EUVD-2020-15420

Malware in sbrugna...

EUVD-2020-15413

Malware in sbrugna...

EUVD-2020-15416

Malware in sbrugna...

EUVD-2020-13937

Malware in sbrugna...

EUVD-2025-22093

Malicious code in bioql PyPI...

CVE-2025-46116

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.1.0.279, where an authenticated attacker can disable the passphrase requirement for a hidden CLI command !v54! via a management API call and then invoke it t...

CVE-2025-46116

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.1.0.279, where an authenticated attacker can disable the passphrase requirement for a hidden CLI command !v54! via a management API call and then invoke it t...

CVE-2025-46117

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.1.0.279, where a hidden debug script .apdebug.sh invoked from the restricted CLI does not properly sanitize its input, allowing an authenticated attacker to...

CommScope Ruckus Unleashed 安全漏洞

The CommScope Ruckus Unleashed is a wireless router from CommScope USA. A security vulnerability exists in CommScope Ruckus Unleashed versions prior to 200.15.6.212.14, 200.17.7.0.139, and Ruckus ZoneDirector versions prior to 10.5.1.0.279, which stems from a password requirement that can be...

CommScope Ruckus Unleashed 安全漏洞

The CommScope Ruckus Unleashed is a wireless router from CommScope USA. A security vulnerability exists in CommScope Ruckus Unleashed versions prior to 200.15.6.212.14, 200.17.7.0.139, and Ruckus ZoneDirector versions prior to 10.5.1.0.279, which stems from improperly cleaned inputs to hidden deb...

CVE-2025-46116

An authenticated attacker can exploit a vulnerability in CommScope Ruckus Unleashed (prior to versions 200.15.6.212.14 and 200.17.7.0.139 ) and Ruckus ZoneDirector (prior to version 10.5.1.0.279 ). By using a management API call, the attacker can disable the passphrase requirement for a hidden CL...

CVE-2025-46123

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.1.0.279, where the authenticated configuration endpoint /admin/conf.jsp writes the Wi-Fi guest password to memory with snprintf using the attacker-supplied...

CVE-2025-46119: J2EE Misconfiguration: Plaintext Password in Configuration File

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.27 and 200.18.7.1.323, and in Ruckus ZoneDirector prior to 10.5.1.0.282, where an authenticated request to the management endpoint /admin/cmdstat.jsp discloses the administrator password in a trivially reversible obfuscat...

CVE-2025-46118: Improper Access Control

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139 and in Ruckus ZoneDirector prior to 10.5.1.0.279, where hard-coded credentials for the ftpuser account provide FTP access to the controller, enabling a remote attacker to upload or retrieve arbitrary...

CVE-2025-46117: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.1.0.279, where a hidden debug script .apdebug.sh invoked from the restricted CLI does not properly sanitize its input, allowing an authenticated attacker to...

CVE-2025-46120: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.27 and 200.18.7.1.323, and in Ruckus ZoneDirector prior to 10.5.1.0.282, where a path-traversal flaw in the web interface lets the server execute attacker-supplied EJS templates outside permitted directories, allowing a...