Ruckus Networks vulnerabilities
We track 3 vulnerabilities in Ruckus Networks products across 31 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 26, 2026.
Latest Ruckus Networks vulnerabilities
- 7.5 High severity
RUCKUS H350: Improper Neutralization of Special Elements used in an OS Command
Ruckus Unleashed contains a remote code execution vulnerability in the web-based management interface that allows authenticated remote attackers to execute arbitrary code on the system when gateway mode is enabled. Attackers can exploit this vulnerability by s
- 10.0 Critical severity
vRIoT IOT Controller: Incorrect Permission Assignment for Critical Resource
The Ruckus vRIoT IoT Controller firmware versions prior to 3.0.0.0 (GA) contain hardcoded credentials for an operating system user account within an initialization script. The SSH service is network-accessible without IP-based restrictions. Although the config
- 10.0 Critical severity
vRIoT IoT Controller: Missing Authentication for Critical Functionality
The Ruckus vRIoT IoT Controller firmware versions prior to 3.0.0.0 (GA) expose a command execution service on TCP port 2004 running with root privileges. Authentication to this service relies on a hardcoded Time-based One-Time Password (TOTP) secret and an emb