Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: RUCKUS Networks Clear all filters
TI-2023-06704 CVE-2023-7338 · GHSA-pm6g-73h3-xpjp

Ruckus Unleashed Authenticated RCE in Gateway Mode

Priority LOW 36

Ruckus Unleashed contains a remote code execution vulnerability in the web-based management interface that allows authenticated remote attackers to execute arbitrary code on the system when gateway mode is enabled.

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00525 Published 2026-03-26 No fix listed CWE-78
TI-2025-42866 CVE-2025-69426 · GHSA-q3qv-m4mc-pj49

Ruckus vRIoT IoT Controller < 3.0.0.0 Hardcoded SSH Credentials RCE

Priority MEDIUM 49

The Ruckus vRIoT IoT Controller firmware versions prior to 3.0.0.0 (GA) contain hardcoded credentials for an operating system user account within an initialization script.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00393 Published 2026-01-09 Fixed in 3.0.0.0 (GA) CWE-732
TI-2025-42865 CVE-2025-69425 · GHSA-gfvg-q74f-527q

Ruckus vRIoT IoT Controller < 3.0.0.0 Hardcoded Tokens RCE

Priority MEDIUM 50

The Ruckus vRIoT IoT Controller firmware versions prior to 3.0.0.0 (GA) expose a command execution service on TCP port 2004 running with root privileges.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00861 Published 2026-01-09 Fixed in 3.0.0.0 (GA) CWE-306