VYPR
← All advisories
Critical severity9.0NVD Advisory· Published Aug 4, 2025· Updated Jun 17, 2026

CVE-2025-44954

CVE-2025-44954

Description

RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Commscope/Ruckus Smartzone Firmware6 versions
    cpe:2.3:o:commscope:ruckus_smartzone_firmware:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:o:commscope:ruckus_smartzone_firmware:*:*:*:*:*:*:*:*range: <6.1.2
    • cpe:2.3:o:commscope:ruckus_smartzone_firmware:6.1.2:-:*:*:*:*:*:*
    • cpe:2.3:o:commscope:ruckus_smartzone_firmware:6.1.2:p2:*:*:*:*:*:*
    • cpe:2.3:o:commscope:ruckus_smartzone_firmware:6.1.2:p3:*:*:*:*:*:*
    • cpe:2.3:o:commscope:ruckus_smartzone_firmware:7.0.0:*:*:*:*:*:*:*
    • cpe:2.3:o:commscope:ruckus_smartzone_firmware:7.1.0:*:*:*:*:*:*:*
  • Ruckus/SmartZonellm-fuzzy2 versions
    <6.1.2p3 Refresh Build+ 1 more
    • (no CPE)range: <6.1.2p3 Refresh Build
    • (no CPE)range: 0

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.