Commscope
Commscope Ruckus Network Director: vulnerabilidades y CVE
Commscope Ruckus Network Director tiene 9 vulnerabilidades publicadas, 2 de ellas en los últimos 12 meses. 2 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE9
Últimos 12 meses2
Críticas2
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2025-67305 | Crítica (9.8) | 0.51% | — | 19 feb 2026 | In RUCKUS Network Director (RND) < 4.5.0.56, the OVA appliance contains hardcoded SSH keys for the postgres user. These keys are identical across all deployments, allowing an attacker with network access to authenticate… |
| CVE-2025-67304 | Crítica (9.8) | 0.50% | — | 19 feb 2026 | In Ruckus Network Director (RND) < 4.5.0.54, the OVA appliance contains hardcoded credentials for the ruckus PostgreSQL database user. In the default configuration, the PostgreSQL service is accessible over the network… |
| CVE-2025-44963 | Alta (8.1) | 0.63% | — | 4 ago 2025 | RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded value of a certain secret key. |
| CVE-2025-44962 | Media (4.3) | 0.82% | — | 4 ago 2025 | RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files. |
| CVE-2025-44961 | Alta (8.8) | 2.1% | — | 4 ago 2025 | In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user. |
| CVE-2025-44960 | Alta (8.8) | 1.8% | — | 4 ago 2025 | RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route. |
| CVE-2025-44958 | Alta (7.5) | 0.34% | — | 4 ago 2025 | RUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format. |
| CVE-2025-44957 | Alta (8.8) | 0.98% | — | 4 ago 2025 | Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers. |
| CVE-2025-44955 | Alta (8.8) | 0.48% | — | 4 ago 2025 | RUCKUS Network Director (RND) before 4.5 allows jailed users to obtain root access vis a weak, hardcoded password. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.
Otros productos de Commscope
Arris Tr3300 Firmware · 8Arris Tg1682g Firmware · 8Ruckus IOT Controller · 7Ruckus Smartzone Firmware · 6Ruckus Zoneflex R500 Firmware · 3Arris Surfboard Sb8200 Firmware · 2Arris Surfboard Sbg6950ac2 Firmware · 2Dg3450 Firmware · 2Ruckus Vriot · 2Tr4400 Firmware · 2Arris Tg2492 Firmware · 1Arris Tg2492lg-na Firmware · 1