CVE-2025-44963

Katalog CVE

CVSS 8.1 · High EPSS 0,63%

Kerentanan Use of Hard-coded Cryptographic Key pada commscope ruckus network director. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded value of a certain secret key.

Rincian

Terbit di NVD

4 Agustus 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-321: Use of Hard-coded Cryptographic Key

EPSS (30 hari)

0,63% peluang dieksploitasi; lebih tinggi dari 48,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://webresources.commscope.com/download/assets/FAQ+Security+Advisory%3A+ID+20250710/225f44ac3bd311f095821a... advisory vendor
• https://claroty.com/team82/disclosure-dashboard/cve-2025-44963 advisory pihak ketiga
• https://kb.cert.org/vuls/id/613753 advisory pihak ketiga
• https://www.kb.cert.org/vuls/id/613753