Records55All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical26CVSS 9.0–10.0
CVSS high18CVSS 7.0–8.9
Exploited now
CommScope, Inc. records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsPriority HIGH 82
In Ruckus Network Director (RND) < 4.5.0.54, the OVA appliance contains hardcoded credentials for the ruckus PostgreSQL database user.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00559 · Published 2026-02-19 · No fix listed CWE-798
Priority HIGH 75
In RUCKUS Network Director (RND) < 4.5.0.56, the OVA appliance contains hardcoded SSH keys for the postgres user.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00573 · Published 2026-02-19 · No fix listed CWE-321
Priority MEDIUM 47
In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user.
CVSS 3.1CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.02055 · Published 2025-08-04 · Fixed in 6.1.2p3 Refresh Build CWE-78
Priority MEDIUM 44
RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01782 · Published 2025-08-04 · Fixed in 6.1.2p3 Refresh Build CWE-78
Priority MEDIUM 42
RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded value of a certain secret key.
CVSS 3.1CRITICAL 9.0· Network · No auth · No interaction · EPSS 0.00644 · Published 2025-08-04 · Fixed in 4.5 CWE-321
Priority MEDIUM 42
Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01123 · Published 2025-08-04 · Fixed in 6.1.2p3 Refresh Build CWE-288
Priority MEDIUM 41
RUCKUS Network Director (RND) before 4.5 allows jailed users to obtain root access vis a weak, hardcoded password.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00485 · Published 2025-08-04 · Fixed in 4.5 CWE-259
Priority LOW 33
RUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0036 · Published 2025-08-04 · Fixed in 4.5 CWE-257
Priority LOW 24
RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files.
CVSS 3.1MEDIUM 5.0· Network · Low privileges · No interaction · EPSS 0.00858 · Published 2025-08-04 · Fixed in 6.1.2p3 Refresh Build CWE-24
THREATIST.IORead the docs