Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-46123

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.1.0.279, where the authenticated configuration endpoint `/admin/_conf.jsp` writes the Wi-Fi guest password to memory with snprintf using the attacker-supplied value as the format string; a crafted password therefore triggers uncontrolled format-string processing and enables remote code execution on the controller.

Published

2025-07-21T15:15:28.500

Last Modified

2025-08-05T17:18:56.067

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 7.2 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-134
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application ruckuswireless ruckus_unleashed < 200.15.6.212.14 Yes
Application ruckuswireless ruckus_unleashed < 200.17.7.0.139 Yes
Application ruckuswireless ruckus_zonedirector < 10.5.1.0.279 Yes
Hardware commscope ruckus_c110 - No
Hardware commscope ruckus_e510 - No
Hardware commscope ruckus_h320 - No
Hardware commscope ruckus_h350 - No
Hardware commscope ruckus_h510 - No
Hardware commscope ruckus_h550 - No
Hardware commscope ruckus_m510 - No
Hardware commscope ruckus_m510-jp - No
Hardware commscope ruckus_r310 - No
Hardware commscope ruckus_r320 - No
Hardware commscope ruckus_r350 - No
Hardware commscope ruckus_r350e - No
Hardware commscope ruckus_r510 - No
Hardware commscope ruckus_r550 - No
Hardware commscope ruckus_r560 - No
Hardware commscope ruckus_r610 - No
Hardware commscope ruckus_r650 - No
Hardware commscope ruckus_r670 - No
Hardware commscope ruckus_r710 - No
Hardware commscope ruckus_r720 - No
Hardware commscope ruckus_r730 - No
Hardware commscope ruckus_r750 - No
Hardware commscope ruckus_r760 - No
Hardware commscope ruckus_r770 - No
Hardware commscope ruckus_r850 - No
Hardware commscope ruckus_t310c - No
Hardware commscope ruckus_t310n - No
Hardware commscope ruckus_t310s - No
Hardware commscope ruckus_t350c - No
Hardware commscope ruckus_t350d - No
Hardware commscope ruckus_t350se - No
Hardware commscope ruckus_t610 - No
Hardware commscope ruckus_t670 - No
Hardware commscope ruckus_t710 - No
Hardware commscope ruckus_t710s - No
Hardware commscope ruckus_t750 - No
Hardware commscope ruckus_t750se - No
Hardware commscope ruckus_t811-cm - No
Hardware commscope ruckus_t811-cm_\(non-sfp\) - No
Hardware commscope zonedirector_1200 - No
References