CVE-2025-46118

MEDIUM

5.3

CVSS Score

Published: July 21, 2025 at 12:00 AM UTC

Updated: June 17, 2026 at 09:25 AM UTC

2 products affected across 1 vendorRuckus UnleashedRuckus Zonedirector· also runs on 40 platforms

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.3

Exploit prediction

EPSS 0.6%

SSVC

PoC

Description

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139 and in Ruckus ZoneDirector prior to 10.5.1.0.279, where hard-coded credentials for the ftpuser account provide FTP access to the controller, enabling a remote attacker to upload or retrieve arbitrary files from writable firmware directories and thereby expose sensitive information or compromise the controller.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Ruckus Unleashed · Ruckuswireless

95%

v < 200.15.6.212.14200.17 ≤ v < 200.17.7.0.139

Affected range stops below 200.15.6.212.14, so it looks safe — our inference, not a vendor statement

Affected range stops below 200.17.7.0.139, so it looks safe — our inference, not a vendor statement

commscope-ruckus-c110 (environment) · commscope-ruckus-e510 (environment) · commscope-ruckus-h320 (environment) · commscope-ruckus-h350 (environment) · commscope-ruckus-h510 (environment) · commscope-ruckus-h550 (environment) · commscope-ruckus-m510 (environment) · commscope-ruckus-m510-jp (environment) · commscope-ruckus-r310 (environment) · commscope-ruckus-r320 (environment) · commscope-ruckus-r350 (environment) · commscope-ruckus-r350e (environment) · commscope-ruckus-r510 (environment) · commscope-ruckus-r550 (environment) · commscope-ruckus-r560 (environment) · commscope-ruckus-r610 (environment) · commscope-ruckus-r650 (environment) · commscope-ruckus-r670 (environment) · commscope-ruckus-r710 (environment) · commscope-ruckus-r720 (environment) · commscope-ruckus-r730 (environment) · commscope-ruckus-r750 (environment) · commscope-ruckus-r760 (environment) · commscope-ruckus-r770 (environment) · commscope-ruckus-r850 (environment) · commscope-ruckus-t310c (environment) · commscope-ruckus-t310n (environment) · commscope-ruckus-t310s (environment) · commscope-ruckus-t350c (environment) · commscope-ruckus-t350d (environment) · commscope-ruckus-t350se (environment) · commscope-ruckus-t610 (environment) · commscope-ruckus-t670 (environment) · commscope-ruckus-t710 (environment) · commscope-ruckus-t710s (environment) · commscope-ruckus-t750 (environment) · commscope-ruckus-t750se (environment) · commscope-ruckus-t811-cm (environment) · commscope-ruckus-t811-cm-non-sfp (environment) · commscope-zonedirector-1200 (environment)

Ruckus Zonedirector · Ruckuswireless

95%

v < 10.5.1.0.279

Affected range stops below 10.5.1.0.279, so it looks safe — our inference, not a vendor statement