Skip to content
OpenAdvisories

Vendor

RUCKUS

12 known vulnerabilities.

5 results · Clear filters · Feed

  • Critical 10.0

    Ruckus vRIoT IoT Controller < 3.0.0.0 Hardcoded SSH Credentials RCE

    The Ruckus vRIoT IoT Controller firmware versions prior to 3.0.0.0 (GA) contain hardcoded credentials for an operating system user account within an initialization script. The SSH service is network-accessible without IP-based restrictions. Although the confi…

  • Critical 10.0

    Ruckus vRIoT IoT Controller < 3.0.0.0 Hardcoded Tokens RCE

    The Ruckus vRIoT IoT Controller firmware versions prior to 3.0.0.0 (GA) expose a command execution service on TCP port 2004 running with root privileges. Authentication to this service relies on a hardcoded Time-based One-Time Password (TOTP) secret and an em…

  • Critical 9.0

    RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded…

  • Critical 9.0

    RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account.

  • Critical 9.9

    In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided …