Ruckus Unleashed

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-4474 Mar 26, 19:28 MEDIUM This Month

Ruckus Access Point products contain an arbitrary file read vulnerability in the command-line interface that allows authenticated remote attackers with administrative privileges to read arbitrary. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Path Traversal Ruckus Access Point Ruckus Unleashed Smartzone 100 Sz 100 Eol +6

NVD

CVSS 4.0

6.9

EPSS

0.0%

CVE-2023-7338 Mar 26, 19:20 HIGH This Week

Ruckus Unleashed contains a remote code execution vulnerability in the web-based management interface that allows authenticated remote attackers to execute arbitrary code on the system when gateway. Rated high severity (CVSS 7.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Command Injection Ruckus Unleashed Ruckus H350 Ruckus H550 +27

NVD

CVSS 4.0

7.7

EPSS

0.2%

CVE-2025-63735 Nov 25, 22:15 MEDIUM POC This Month

A reflected Cross site scripting (XSS) vulnerability in Ruckus Unleashed 200.13.6.1.319 via the name parameter to the the captive-portal endpoint selfguestpass/guestAccessSubmit.jsp. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Ruckus Unleashed Ruckuswireless

NVD GitHub

CVSS 3.1

6.1

EPSS

0.1%

CVE-2021-4474

EPSS 0% CVSS 6.9

MEDIUM This Month

Information Disclosure Path Traversal Ruckus Access Point +8

NVD

CVE-2023-7338

EPSS 0% CVSS 7.7

HIGH This Week

RCE Command Injection Ruckus Unleashed +29

NVD

CVE-2025-63735

EPSS 0% CVSS 6.1

MEDIUM POC This Month

XSS Ruckus Unleashed Ruckuswireless

NVD GitHub