Ruckus Network Director vulnerabilities
3 known vulnerabilities in Ruckus Network Director from CommScope. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
Ruckus Network Director: Use of Hard-coded Cryptographic Key
In RUCKUS Network Director (RND) < 4.5.0.56, the OVA appliance contains hardcoded SSH keys for the postgres user. These keys are identical across all deployments, allowing an attacker with network access to authenticate via SSH without a password. Once authent
- 9.8 Critical severity
Ruckus Network Director: Use of Hard-coded Credentials
In Ruckus Network Director (RND) < 4.5.0.54, the OVA appliance contains hardcoded credentials for the ruckus PostgreSQL database user. In the default configuration, the PostgreSQL service is accessible over the network on TCP port 5432. An attacker can use the
- 8.1 High severity
Network Director: Use of Hard-coded Cryptographic Key
RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded value of a certain secret key.