Skip to content
Noroxi

ruckuswireless records

46 published records for vendor ruckuswireless. 1 of them have been exploited in the wild (listed in CISA KEV) and 1 have a ready-made attack tool.

Filter by product ↓

Researcher profile

Entered KEV
1 · 2.2%
Weaponized
1 · 2.2%
Pre-auth RCE
12
With a fix record
0%
Median publish → KEV
88 days

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 17
  2. 18
  3. 20
  4. 22
  5. 23
  6. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

46 records
  • CVE-2023-25717
    98Now

    Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin

    CriticalCVSS 9.8KEVWeaponizedEPSS 98%

    ruckuswireless · ruckus wireless adminFeb 13, 2023

  • CVE-2019-19838
    46Plan

    emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribu

    CriticalCVSS 9.8No exploitEPSS 24%

    ruckuswireless · unleashedJan 23, 2020

  • CVE-2019-19842
    40Plan

    emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribu

    CriticalCVSS 9.8Proof of conceptEPSS 4%

    ruckuswireless · unleashedJan 22, 2020

  • CVE-2019-19840
    40Plan

    A stack-based buffer overflow in zap_parse_args in zap.c in zap in Ruckus Unleashed through 200.7.10.102.64 allows remote code execution via

    CriticalCVSS 9.8No exploitEPSS 4%

    ruckuswireless · unleashedJan 22, 2020

  • CVE-2020-13916
    40Plan

    A stack buffer overflow in webs in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to execute code via an unauthe

    CriticalCVSS 9.8No exploitEPSS 3%

    ruckuswireless · unleashed firmwareJul 28, 2020

  • CVE-2019-19836
    40Plan

    AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote code execution via a POST request that uses

    CriticalCVSS 9.8No exploitEPSS 3%

    ruckuswireless · unleashedJan 22, 2020

  • CVE-2019-19841
    40Plan

    emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribu

    CriticalCVSS 9.8No exploitEPSS 3%

    ruckuswireless · unleashedJan 22, 2020

  • CVE-2019-19839
    40Plan

    emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribu

    CriticalCVSS 9.8No exploitEPSS 3%

    ruckuswireless · unleashedJan 23, 2020

  • CVE-2020-13919
    40Plan

    emfd/libemf in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to achieve command injection via a crafted HTTP re

    CriticalCVSS 9.8No exploitEPSS 2%

    ruckuswireless · unleashed firmwareJul 28, 2020

  • CVE-2020-13917
    40Plan

    rkscli in Ruckus Wireless Unleashed through 200.7.10.92 allows a remote attacker to achieve command injection and jailbreak the CLI via a cr

    CriticalCVSS 9.8No exploitEPSS 2%

    ruckuswireless · unleashed firmwareJul 28, 2020

  • CVE-2019-19843
    40Plan

    Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote credential fetch via an una

    CriticalCVSS 9.8No exploitEPSS 1%

    ruckuswireless · unleashedJan 22, 2020

  • CVE-2025-46121
    39Monitor

    An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, where the functions `stamgr_cfg_adpt_addS

    CriticalCVSS 9.8No exploitEPSS 1%

    commscope · ruckus c110Jul 21, 2025

  • CVE-2025-46120
    39Monitor

    An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.27 and 200.18.7.1.323, and in Ruckus ZoneDirector prior to 10.5.

    CriticalCVSS 9.8No exploitEPSS 1%

    commscope · ruckus c110Jul 21, 2025

  • CVE-2020-22653
    39Monitor

    In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus

    CriticalCVSS 9.8No exploitEPSS 0%

    ruckuswireless · r310 firmwareJan 20, 2023

  • CVE-2020-22658
    39Monitor

    In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus

    CriticalCVSS 9.8No exploitEPSS 0%

    ruckuswireless · r310 firmwareJan 20, 2023

  • CVE-2020-22654
    39Monitor

    In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus

    CriticalCVSS 9.8No exploitEPSS 0%

    ruckuswireless · r310 firmwareJan 20, 2023

  • CVE-2017-6229
    36Monitor

    Ruckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone Director firmware releases 10.1.0.0.x, 9.10.2.0.

    HighCVSS 8.8No exploitEPSS 2%

    ruckuswireless · r500 firmwareFeb 14, 2018

  • CVE-2017-6230
    36Monitor

    Ruckus Networks Solo APs firmware releases R110.x or before and Ruckus Networks SZ managed APs firmware releases R5.x or before contain auth

    HighCVSS 8.8No exploitEPSS 2%

    ruckuswireless · solo access point firmwareFeb 14, 2018

  • CVE-2018-11036
    36Monitor

    Ruckus SmartZone (formerly Virtual SmartCell Gateway or vSCG) 3.5.0, 3.5.1, 3.6.0, and 3.6.1 (Essentials and High Scale) on vSZ, SZ-100, SZ-

    CriticalCVSS 9.1No exploitEPSS 1%

    ruckuswireless · vsz firmwareMay 31, 2018

  • CVE-2025-46122
    36Monitor

    An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, where the authenticated diagnostics API e

    CriticalCVSS 9.1No exploitEPSS 1%

    commscope · ruckus c110Jul 21, 2025

  • CVE-2025-46117
    36Monitor

    An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.

    CriticalCVSS 9.1No exploitEPSS 0%

    commscope · ruckus c110Jul 21, 2025

  • CVE-2020-22657
    36Monitor

    In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus

    CriticalCVSS 9.1No exploitEPSS 0%

    ruckuswireless · r310 firmwareJan 20, 2023

  • CVE-2017-6224
    35Monitor

    Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x (less than 10.0.1.0.17 MR1 release) and Ruckus Wire

    HighCVSS 8.8No exploitEPSS 1%

    ruckuswireless · zonedirector firmwareOct 13, 2017

  • CVE-2025-46116
    35Monitor

    An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.

    HighCVSS 8.8No exploitEPSS 0%

    commscope · ruckus c110Jul 21, 2025

  • CVE-2020-13918
    31Monitor

    Incorrect access control in webs in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to leak system information (t

    HighCVSS 7.5No exploitEPSS 2%

    ruckuswireless · unleashed firmwareJul 28, 2020