9.0Kritik
CVE-2025-44963
Açıklama
RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded value of a certain secret key.
Zayıflık türü (CWE):
CWE-321
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| commscope | ruckus network director | < 4.5.0.0 | |
| RUCKUS | Network Director | < 4.5 |
Kaynaklar ve yamalar
- https://kb.cert.org/vuls/id/613753 Third Party Advisory
- https://webresources.commscope.com/download/assets/FAQ+Security+Advisory%3A+ID+20250710/225f44ac3bd311f095821… Vendor Advisory
- https://claroty.com/team82/disclosure-dashboard/cve-2025-44963 Third Party Advisory
- https://www.kb.cert.org/vuls/id/613753
CPE eşleşmeleri (NVD) (1)
cpe:2.3:a:commscope:ruckus_network_director:*:*:*:*:*:*:*:*< 4.5.0.0