Vulnerabilidades en RUCKUS
9 resultadosAnálisis Vexday
A Ruckus apresenta um perfil de risco moderado com 8 vulnerabilidades catalogadas, das quais 3 são críticas, predominantemente relacionadas a injeção de comandos (CWE-78). Não há registros de exploração ativa em ambiente wild, e o portfólio não recebeu atualizações de vulnerabilidades nos últimos 90 dias, sugerindo que o risco é histórico e já absorvido pelo mercado. A atenção deve concentrar-se em garantir que as implementações críticas estejam patchadas, especialmente nas versões mais antigas.
CVE-2025-44961CRITICALIn RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated uEPSS 2.0%CVE-2025-44960HIGHRUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route.EPSS 1.8%CVE-2025-44957HIGHRuckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers.EPSS 0.9%CVE-2025-44962MEDIUMRUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files.EPSS 0.7%CVE-2025-44954CRITICALRUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account.EPSS 0.7%CVE-2025-44963CRITICALRUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded value of a certain sEPSS 0.6%CVE-2021-4474MEDIUMRuckus AP CLI Arbitrary File Read Allows Authenticated Remote File AccessEPSS 0.5%CVE-2025-44955HIGHRUCKUS Network Director (RND) before 4.5 allows jailed users to obtain root access vis a weak, hardcoded password.EPSS 0.5%CVE-2025-44958MEDIUMRUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format.EPSS 0.4%