CVE-2025-46120

CRITICAL

9.8

Description

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.27 and 200.18.7.1.323, and in Ruckus ZoneDirector prior to 10.5.1.0.282, where a path-traversal flaw in the web interface lets the server execute attacker-supplied EJS templates outside permitted directories, allowing a remote unauthenticated attacker who can upload a template (e.g., via FTP) to escalate privileges and run arbitrary template code on the controller.

CVE Details

CVSS v3.1 Score9.8

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published7/21/2025

Last Modified8/5/2025

Sourcenvd

Honeypot Sightings0

Affected Products

commscope:ruckus_c110commscope:ruckus_e510commscope:ruckus_h320commscope:ruckus_h350commscope:ruckus_h510commscope:ruckus_h550commscope:ruckus_m510commscope:ruckus_m510-jpcommscope:ruckus_r310commscope:ruckus_r320commscope:ruckus_r350commscope:ruckus_r350ecommscope:ruckus_r510commscope:ruckus_r550commscope:ruckus_r560commscope:ruckus_r610commscope:ruckus_r650commscope:ruckus_r670commscope:ruckus_r710commscope:ruckus_r720commscope:ruckus_r730commscope:ruckus_r750commscope:ruckus_r760commscope:ruckus_r770commscope:ruckus_r850commscope:ruckus_t310ccommscope:ruckus_t310ncommscope:ruckus_t310scommscope:ruckus_t350ccommscope:ruckus_t350dcommscope:ruckus_t350secommscope:ruckus_t610commscope:ruckus_t670commscope:ruckus_t710commscope:ruckus_t710scommscope:ruckus_t750commscope:ruckus_t750secommscope:ruckus_t811-cmcommscope:ruckus_t811-cm_\(non-sfp\)commscope:zonedirector_1200ruckuswireless:ruckus_unleashedruckuswireless:ruckus_zonedirector

Weaknesses (CWE)

CWE-22

References

https://sector7.computest.nl/post/2025-07-ruckus-unleashed/(cve@mitre.org)

https://support.ruckuswireless.com/security_bulletins/330(cve@mitre.org)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.