CVE-2025-46116HIGH 8.8EPSS p36.1%
CVE-2025-46116CVE-2025-46116
Description
An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.1.0.279, where an authenticated attacker can disable the passphrase requirement for a hidden CLI command `!v54!` via a management API call and then invoke it to escape the restricted shell and obtain a root shell on the controller.
Scoring
| CVSS 3.1 | 8.8 (HIGH) |
| Vector | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 0.46% probability of exploitation · percentile 36.1% · 2026-06-18T12:00:27Z |
| Published | 2025-07-21 |
| Last modified | 2025-08-05 |
Underlying weaknesses· 2
References
2
| Type | Target | Confidence | Tier |
|---|---|---|---|
| Weakness | Execution with Unnecessary Privilegescwe-250 | 0% | live |
| Weakness | Improper Privilege Managementcwe-269 | 0% | live |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.