CVE-2025-44954

—

CVSS 3.1

9.8 critical

EPSS

<1%p53

Published

Aug 4, 2025 (Aug 4, 2025)

Modified

Jun 17, 2026

Description

RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account.

Vendors: commscope
Products: ruckus smartzone firmware
Weakness: CWE-1394
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news2 stories

⚡ Weekly Recap: Scattered Spider Arrests, Car Exploits, macOS Malware, Fortinet RCE and More

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2025Ransomware CVE-2025-25257 CVE-2025-25251 CVE-2025-31365+36 CVEs1

60

Ruckus network management solutions riddled with unpatched vulnerabilities

Help Net SecurityJul 10, 00:00 UTC · Jul 10, 2025Vulnerability CVE-2025-44957 CVE-2025-44962 CVE-2025-44954+6 CVEs

35