RN
Product
Ruckus Network Director
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 6Medium 1Low 0
Watch
Add Ruckus Network Director to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-67305 | 9.8 | Feb 19 | In RUCKUS Network Director (RND) < 4.5.0.56, the OVA appliance contains hardcoded SSH keys for the postgres user Affected: before 4.5.0.56 |
| CVE-2025-67304 | 9.8 | Feb 19 | In Ruckus Network Director (RND) < 4.5.0.54, the OVA appliance contains hardcoded credentials for the ruckus PostgreSQL database user Affected: before 4.5.0.56 |
| CVE-2025-44960 | 8.8 | Aug 4 | RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route Affected: before 4.5.0.51 |
| CVE-2025-44955 | 8.8 | Aug 4 | RUCKUS Network Director (RND) before 4.5 allows jailed users to obtain root access vis a weak, hardcoded password Affected: before 4.5.0.0 |
| CVE-2025-44961 | 8.8 | Aug 4 | In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user Affected: before 4.5.0.51 |
| CVE-2025-44957 | 8.8 | Aug 4 | Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers Affected: before 4.5.0.51 |
| CVE-2025-44963 | 8.1 | Aug 4 | RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded value of a certain secret key Affected: before 4.5.0.0 |
| CVE-2025-44958 | 7.5 | Aug 4 | RUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format Affected: before 4.5.0.0 |
| CVE-2025-44962 | 4.3 | Aug 4 | RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files Affected: before 4.5.0.51 |
Showing 9