Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: RUCKUS Networks vRIoT IOT Controller — support.ruckuswireless.com/security_bulletins/336 Clear all filters
TI-2025-42866 CVE-2025-69426 · GHSA-q3qv-m4mc-pj49

Ruckus vRIoT IoT Controller < 3.0.0.0 Hardcoded SSH Credentials RCE

Priority MEDIUM 49

The Ruckus vRIoT IoT Controller firmware versions prior to 3.0.0.0 (GA) contain hardcoded credentials for an operating system user account within an initialization script.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00393 Published 2026-01-09 Fixed in 3.0.0.0 (GA) CWE-732
TI-2025-42865 CVE-2025-69425 · GHSA-gfvg-q74f-527q

Ruckus vRIoT IoT Controller < 3.0.0.0 Hardcoded Tokens RCE

Priority MEDIUM 50

The Ruckus vRIoT IoT Controller firmware versions prior to 3.0.0.0 (GA) expose a command execution service on TCP port 2004 running with root privileges.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00861 Published 2026-01-09 Fixed in 3.0.0.0 (GA) CWE-306