Read the docs

RUCKUS Networks

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

RUCKUS Networks records in CISA KEV

No RUCKUS Networks vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-42865 CVE-2025-69425 · GHSA-gfvg-q74f-527q

Ruckus vRIoT IoT Controller < 3.0.0.0 Hardcoded Tokens RCE

Priority MEDIUM 50

The Ruckus vRIoT IoT Controller firmware versions prior to 3.0.0.0 (GA) expose a command execution service on TCP port 2004 running with root privileges.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00861 Published 2026-01-09 Fixed in 3.0.0.0 (GA) CWE-306
TI-2025-42866 CVE-2025-69426 · GHSA-q3qv-m4mc-pj49

Ruckus vRIoT IoT Controller < 3.0.0.0 Hardcoded SSH Credentials RCE

Priority MEDIUM 49

The Ruckus vRIoT IoT Controller firmware versions prior to 3.0.0.0 (GA) contain hardcoded credentials for an operating system user account within an initialization script.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00393 Published 2026-01-09 Fixed in 3.0.0.0 (GA) CWE-732
TI-2023-06704 CVE-2023-7338 · GHSA-pm6g-73h3-xpjp

Ruckus Unleashed Authenticated RCE in Gateway Mode

Priority LOW 36

Ruckus Unleashed contains a remote code execution vulnerability in the web-based management interface that allows authenticated remote attackers to execute arbitrary code on the system when gateway mode is enabled.

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00525 Published 2026-03-26 No fix listed CWE-78
Open these records in search →