Unrated severityNVD Advisory· Published Jul 21, 2025· Updated Jul 22, 2025
CVE-2025-46116
CVE-2025-46116
Description
An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.1.0.279, where an authenticated attacker can disable the passphrase requirement for a hidden CLI command !v54! via a management API call and then invoke it to escape the restricted shell and obtain a root shell on the controller.
Affected products
3- CommScope/Ruckus Unleasheddescription
- Range: <200.15.6.212.14, >=200.17.0.0 <200.17.7.0.139
- Range: <10.5.1.0.279
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.