CVE-2025-46123

Exploit

EPSS 0.58%
Veröffentlicht 21.07.2025 00:00:00
Zuletzt bearbeitet 05.08.2025 17:18:56
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.1.0.279, where the authenticated configuration endpoint `/admin/_conf.jsp` writes the Wi-Fi guest password to memory with snprintf using the attacker-supplied value as the format string; a crafted password therefore triggers uncontrolled format-string processing and enables remote code execution on the controller.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ruckuswireless ≫ Ruckus Unleashed Version < 200.15.6.212.14

   Commscope ≫ Ruckus C110 Version-
   Commscope ≫ Ruckus E510 Version-
   Commscope ≫ Ruckus H320 Version-
   Commscope ≫ Ruckus H350 Version-
   Commscope ≫ Ruckus H510 Version-
   Commscope ≫ Ruckus H550 Version-
   Commscope ≫ Ruckus M510 Version-
   Commscope ≫ Ruckus M510-jp Version-
   Commscope ≫ Ruckus R310 Version-
   Commscope ≫ Ruckus R320 Version-
   Commscope ≫ Ruckus R350 Version-
   Commscope ≫ Ruckus R350e Version-
   Commscope ≫ Ruckus R510 Version-
   Commscope ≫ Ruckus R550 Version-
   Commscope ≫ Ruckus R560 Version-
   Commscope ≫ Ruckus R610 Version-
   Commscope ≫ Ruckus R650 Version-
   Commscope ≫ Ruckus R670 Version-
   Commscope ≫ Ruckus R710 Version-
   Commscope ≫ Ruckus R720 Version-
   Commscope ≫ Ruckus R730 Version-
   Commscope ≫ Ruckus R750 Version-
   Commscope ≫ Ruckus R760 Version-
   Commscope ≫ Ruckus R770 Version-
   Commscope ≫ Ruckus R850 Version-
   Commscope ≫ Ruckus T310c Version-
   Commscope ≫ Ruckus T310n Version-
   Commscope ≫ Ruckus T310s Version-
   Commscope ≫ Ruckus T350c Version-
   Commscope ≫ Ruckus T350d Version-
   Commscope ≫ Ruckus T350se Version-
   Commscope ≫ Ruckus T610 Version-
   Commscope ≫ Ruckus T670 Version-
   Commscope ≫ Ruckus T710 Version-
   Commscope ≫ Ruckus T710s Version-
   Commscope ≫ Ruckus T750 Version-
   Commscope ≫ Ruckus T750se Version-
   Commscope ≫ Ruckus T811-cm Version-
   Commscope ≫ Zonedirector 1200 Version-

Ruckuswireless ≫ Ruckus Unleashed Version >= 200.17 < 200.17.7.0.139

Ruckuswireless ≫ Ruckus Zonedirector Version < 10.5.1.0.279

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.58%	0.679

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0	7.2	1.2	5.9	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-134 Use of Externally-Controlled Format String

The product uses a function that accepts a format string as an argument, but the format string originates from an external source.

https://support.ruckuswireless.com/security_bulletins/330

Product

https://sector7.computest.nl/post/2025-07-ruckus-unleashed/

Third Party Advisory

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2025-46123

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-46123

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-46123

EUVD