CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-67305

In RUCKUS Network Director (RND) < 4.5.0.56, the OVA appliance contains hardcoded SSH keys for the postgres user. These keys are identical across all deployments, allowing an attacker with network access to authenticate via SSH without a password. Once authenticated, the attacker can access the PostgreSQL database with superuser privileges, create administrative users for the web interface, and potentially escalate privileges further.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 23.9%

CVSS Severity

CVSS v3 Score 9.8

References

Products affected by CVE-2025-67305

Commscope » Ruckus Network Director » Version: N/A

cpe:2.3:a:commscope:ruckus_network_director:-
Commscope » Ruckus Network Director » Version: 3.5.0.98

cpe:2.3:a:commscope:ruckus_network_director:3.5.0.98
Commscope » Ruckus Network Director » Version: 3.5.0.99

cpe:2.3:a:commscope:ruckus_network_director:3.5.0.99
Commscope » Ruckus Network Director » Version: 4.0.0.23

cpe:2.3:a:commscope:ruckus_network_director:4.0.0.23
Commscope » Ruckus Network Director » Version: 4.0.0.24

cpe:2.3:a:commscope:ruckus_network_director:4.0.0.24
Commscope » Ruckus Network Director » Version: 4.0.0.25

cpe:2.3:a:commscope:ruckus_network_director:4.0.0.25
Commscope » Ruckus Network Director » Version: 4.0.0.29

cpe:2.3:a:commscope:ruckus_network_director:4.0.0.29
Commscope » Ruckus Network Director » Version: 4.0.0.36

cpe:2.3:a:commscope:ruckus_network_director:4.0.0.36
Commscope » Ruckus Network Director » Version: 4.0.0.45

cpe:2.3:a:commscope:ruckus_network_director:4.0.0.45
Commscope » Ruckus Network Director » Version: 4.0.0.47

cpe:2.3:a:commscope:ruckus_network_director:4.0.0.47
Commscope » Ruckus Network Director » Version: 4.5.0.12

cpe:2.3:a:commscope:ruckus_network_director:4.5.0.12
Commscope » Ruckus Network Director » Version: 4.5.0.13

cpe:2.3:a:commscope:ruckus_network_director:4.5.0.13
Commscope » Ruckus Network Director » Version: 4.5.0.17

cpe:2.3:a:commscope:ruckus_network_director:4.5.0.17
Commscope » Ruckus Network Director » Version: 4.5.0.22

cpe:2.3:a:commscope:ruckus_network_director:4.5.0.22
Commscope » Ruckus Network Director » Version: 4.5.0.26

cpe:2.3:a:commscope:ruckus_network_director:4.5.0.26
Commscope » Ruckus Network Director » Version: 4.5.0.30

cpe:2.3:a:commscope:ruckus_network_director:4.5.0.30
Commscope » Ruckus Network Director » Version: 4.5.0.32

cpe:2.3:a:commscope:ruckus_network_director:4.5.0.32
Commscope » Ruckus Network Director » Version: 4.5.0.33

cpe:2.3:a:commscope:ruckus_network_director:4.5.0.33
Commscope » Ruckus Network Director » Version: 4.5.0.34

cpe:2.3:a:commscope:ruckus_network_director:4.5.0.34
Commscope » Ruckus Network Director » Version: 4.5.0.37

cpe:2.3:a:commscope:ruckus_network_director:4.5.0.37
Commscope » Ruckus Network Director » Version: 4.5.0.51

cpe:2.3:a:commscope:ruckus_network_director:4.5.0.51

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-67305

Products

Pricing

Contact Us