Vulnerabilitymedium

Ruckus network management solutions riddled with unpatched vulnerabilities

Help Net Securityby @zeljkazorzJul 10, 2025 · 00:00 UTC (Jul 10, 2025)3 min read3 · 1 read

Read at helpnetsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2025-44957 CVE-2025-44962 CVE-2025-44954 CVE-2025-44960 CVE-2025-44961 CVE-2025-44963 CVE-2025-44955 CVE-2025-6243 CVE-2025-44958

Tags: cve-2025-44957 cve-2025-44962 cve-2025-44954 cve-2025-44960 cve-2025-44961 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-44954 +4 related CVEs CVE-2025-44961 CVE-2025-44960 CVE-2025-44957 CVE-2025-44962	RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account	9.8 group max	<1%		Aug 4, 2025
CVE-2025-44955 +2 related CVEs CVE-2025-44963 CVE-2025-44958	RUCKUS Network Director (RND) before 4.5 allows jailed users to obtain root access vis a weak, hardcoded password	8.8 group max	<1%		Aug 4, 2025

From the original article

3 min read at helpnetsecurity.com

Claroty researcher Noam Moshe has discovered serious vulnerabilities in two Ruckus Networks (formerly Ruckus Wireless) products that may allow attackers to compromise the environments managed by the affected software, Carnegie Mellon University’s CERT Coordination Center (CERT/CC) has warned. The vulnerabilities have yet to be patched and it’s unknown when (or whether) they will be.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.