RUCKUS Virtual SmartZone (vSZ) and RUCKUS Network Director (RND) contain multiple vulnerabilities

🗓️ 08 Jul 2025 00:00:00Reported by CERTType

cert

cert🔗 www.kb.cert.org👁 47 Views

Ruckus Virtual SmartZone and Network Director have multiple vulnerabilities allowing full compromise risks.

Reporter	Title	Published	Views	Family All 82
BDU FSTEC	The vulnerability of the software for centralized control of the Ruckus Network Director network infrastructure lies in the use of rigidly encrypted user credentials. This allows a malicious individual to elevate their privileges and gain access to the RND server.	9 Jan 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Ruckus Virtual SmartZone’s microprogrammed software controllers, related to authentication procedures that lack sufficient safeguards, allows attackers to circumvent existing security restrictions.	9 Jan 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software for centralized control of the Ruckus Network Director network infrastructure, which stems from the use of strictly encrypted user credentials, allows a intruder to gain unauthorized access to confidential information.	9 Jan 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Ruckus Virtual SmartZone wireless network controller’s microprogramming software, related to the failure to implement measures to neutralize special elements, allows a intruder to execute arbitrary code.	9 Jan 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Ruckus Virtual SmartZone’s microprogrammed software controllers, related to the lack of measures taken to clean data at the control level, allows a intruder to execute arbitrary code.	9 Jan 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Ruckus Virtual SmartZone’s microprogrammed software controllers, related to bypassing the relative path, allows a intruder to load arbitrary files and gain unauthorized access to confidential information.	9 Jan 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software for centralized control of the Ruckus Network Director’s network infrastructure lies in the use of a hard-crypted cryptographic key. This allows attackers to circumvent existing security restrictions and gain increased privileges.	9 Jan 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software for centralized control of the Ruckus Network Director’s network infrastructure lies in the use of a hard-crypted cryptographic key. This allows attackers to circumvent existing security restrictions and gain increased privileges.	9 Jan 202600:00	–	bdu_fstec
Circl	CVE-2025-44955	8 Jul 202519:55	–	circl
Circl	CVE-2025-44957	8 Jul 202519:55	–	circl

24 Jul 2025 22:12Current

10High risk

Vulners AI Score10

CVSS 3.18.8 - 9.9

EPSS0.02044

SSVC

ruckus wireless virtual smartzone network director vulnerabilities authentication bypass file read remote code execution