We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2025-46117



Description

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.1.0.279, where a hidden debug script `.ap_debug.sh` invoked from the restricted CLI does not properly sanitize its input, allowing an authenticated attacker to execute arbitrary commands as root on the controller or specified target.

Reserved 2025-04-22 | Published 2025-07-21 | Updated 2025-07-21 | Assigner mitre

References

commscope.com

support.ruckuswireless.com/security_bulletins/330

sector7.computest.nl/post/2025-07-ruckus-unleashed/

cve.org (CVE-2025-46117)

nvd.nist.gov (CVE-2025-46117)

Download JSON

Share this page
https://cve.threatint.eu/CVE/CVE-2025-46117

Support options

Helpdesk Chat, Email, Knowledgebase