vRIoT IOT Controller vulnerabilities

2 known vulnerabilities in vRIoT IOT Controller from Ruckus Networks. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  vRIoT IOT Controller: Incorrect Permission Assignment for Critical Resource

  CVE-2025-69426Jan 9, 2026Ruckus Networks

  The Ruckus vRIoT IoT Controller firmware versions prior to 3.0.0.0 (GA) contain hardcoded credentials for an operating system user account within an initialization script. The SSH service is network-accessible without IP-based restrictions. Although the config

• 10.0 Critical severity

  vRIoT IoT Controller: Missing Authentication for Critical Functionality

  CVE-2025-69425Jan 9, 2026Ruckus Networks

  The Ruckus vRIoT IoT Controller firmware versions prior to 3.0.0.0 (GA) expose a command execution service on TCP port 2004 running with root privileges. Authentication to this service relies on a hardcoded Time-based One-Time Password (TOTP) secret and an emb