CVE detail
CVE-2025-44963
RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded value of a certain secret key.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 17.9 · diversity 20.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
5 source links · newest first
- https://www.kb.cert.org/vuls/id/613753www.kb.cert.org
No excerpt available.
Exploitwww.kb.cert.orgAug 4, 2025, 5:15 PM - https://webresources.commscope.com/download/assets/FAQ+Security+Advisory%3A+ID+20250710/225f44ac3bd311f095821adcaa92e24ewebresources.commscope.com
No excerpt available.
Vendor Advisorywebresources.commscope.comAug 4, 2025, 5:15 PM - https://kb.cert.org/vuls/id/613753kb.cert.org
No excerpt available.
Exploitkb.cert.orgAug 4, 2025, 5:15 PM No excerpt available.
Third Party Advisoryclaroty.comAug 4, 2025, 5:15 PMClaroty researcher Noam Moshe has discovered serious vulnerabilities in two Ruckus Networks (formerly Ruckus Wireless) products that may allow attackers to compromise the environments managed by the affected software, Carnegie Mellon University’s CERT Coordination Center (CERT/CC) has warned. The vulnerabilities have yet to be patched and it’s unknown when (or whether) they will be. The vulnerabilities Ruckus Networks is a subsidiary of American network infrastructure provider CommScope. It sells a variety of wired and wireless … More →
newswww.helpnetsecurity.comJul 10, 2025, 12:36 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2025-67305CVSS 9.8 · Critical
In RUCKUS Network Director (RND) < 4.5.0.56, the OVA appliance contains hardcoded SSH keys for the postgres user. These keys are identical across all deployments, allowing an atta…
- CVE-2026-64887CVSS 7.0 · High
Use of hard-coded cryptographic key vulnerability in Johnson Controls Airwall allows : Cryptanalytic Attack. This issue affects Airwall: before 4.1.
- CVE-2026-17468CVSS 5.3 · Medium
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to forge valid session tokens due to the use of a hardcoded cryptographic key.
- CVE-2026-63423CVSS 8.5 · High
During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local auth…
- CVE-2026-34635CVSS 8.4 · High
is affected by a Use of Hard-coded Cryptographic Key vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to b…
- CVE-2026-57262CVSS 7.0 · High
A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). Affected products use a static, hardcoded AES master key to encrypt project files. This could allow…