CVE-2025-44961

概要

参考情報

• claroty.com/team82/disclosure-dashboard/cve-2025-44961 · Third Party Advisory
• kb.cert.org/vuls/id/613753 · Third Party Advisory
• webresources.commscope.com/download/assets/FAQ+Security+Advisory%3A+ID+20250710/225f44ac3bd311f095821adcaa92e24e · Vendor Advisory
• kb.cert.org/vuls/id/613753

ruckus network director のその他の脆弱性

• CVE-2025-67305緊急 9.8In RUCKUS Network Director (RND) < 4.5.0.56, the OVA appliance contains hardcoded SSH keys for the postgres user. These keys are identical a…
• CVE-2025-67304緊急 9.8In Ruckus Network Director (RND) < 4.5.0.54, the OVA appliance contains hardcoded credentials for the ruckus PostgreSQL database user. In th…
• CVE-2025-44963高 8.1RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded value of a certain s…
• CVE-2025-44962中 4.3RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files.
• CVE-2025-44960高 8.8RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route.