Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-44963

RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded value of a certain secret key.

Published

2025-08-04T17:15:30.540

Last Modified

2025-09-23T18:48:59.567

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 9.0 (CRITICAL)

Weaknesses

Type: Primary
CWE-321

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	commscope	ruckus_network_director	< 4.5.0.0	Yes

References

https://claroty.com/team82/disclosure-dashboard/cve-2025-44963 Third Party Advisory ([email protected])
https://kb.cert.org/vuls/id/613753 Third Party Advisory ([email protected])
https://webresources.commscope.com/download/assets/FAQ+Security+Advisory%3A+ID+20250710/225f44ac3bd311f095821adcaa92e24e Vendor Advisory ([email protected])