CVE-2025-46118: n/a
Source CVE Database V5
Not known to be exploited · CVSS 5.3 Medium · fixed in 200.17.7.0.139 : update CommScope Ruckus Unleashed when convenient.
Data as of 25 Oct 2026, 19:02 UTC
- EPSS
- 0.5% chance of exploitation in 30 days – higher than 45% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Affects
- CommScope Ruckus Unleashed prior to 200.15.6.212.14
- Patch
- Available – fixed in 200.17.7.0.139, 200.15.6.212.14, 10.5.1.0.279
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitation evidence
Disclosed: evidence found.
CVE published 21 Jul 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 2026-10-25.
What to do
AI-suggested
European organizations should immediately inventory their network infrastructure to identify deployments of affected Ruckus Unleashed and ZoneDirector controllers. If you cannot patch yet, organizations should implement compensating controls such as restricting network access to the management interfaces of these controllers using network segmentation and firewall rules, allowing FTP access only from trusted administrative hosts. Disabling FTP services on the controllers, if possible, or replacing FTP with more secure protocols should be prioritized. Monitoring network traffic for unusual FTP activity targeting these devices can help detect exploitation attempts. Organizations should also review and rotate any credentials associated with these devices and audit logs for signs of unauthorized access. Engaging with CommScope support to obtain updates or workarounds and planning timely patch deployment once available is critical. Additionally, consider deploying intrusion detection/prevention systems (IDS/IPS) with signatures tuned to detect exploitation attempts of this vulnerability. Finally, educating network administrators about the risks of hard-coded credentials and enforcing strict device configuration management policies will reduce future exposure.
Description
An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139 and in Ruckus ZoneDirector prior to 10.5.1.0.279, where hard-coded credentials for the ftpuser account provide FTP access to the controller, enabling a remote attacker to upload or retrieve arbitrary files from writable firmware directories and thereby expose sensitive information or compromise the controller.