Ivan Racic

**Nome do Software Vulnerável e Versões Afetadas** SDMC NE6037 versão 7.1.6.0.25 SDMC NE6037 versão 7.1.6.1.9 B9 **Description** Os endpoints de recuperação da interface de gerenciamento web "mgmt.php" e "npcmd.php" contêm uma senha hardcoded. Atacantes não autenticados podem obter acesso de root ao enviar essas credenciais hardcoded para os endpoints de recuperação via HTTP. Esse acesso permite que atacantes habilitem os serviços filtrados de SSH e Telnet, resultando em acesso remoto não autenticado de nível root ao sistema subjacente. **Recommendations** Atualizar a versão 7.1.6.0.25 para uma versão mais recente que remova as credenciais hardcoded. Atualizar a versão 7.1.6.1.9 B9 para uma versão mais recente que remova as credenciais hardcoded.

**Name of the Vulnerable Software and Affected Versions** Ruckus vRIoT IoT Controller versions prior to 3.0.0.0 (GA) **Description** The Ruckus vRIoT IoT Controller firmware exposes a command execution service on TCP port 2004 running with root privileges. Authentication to this service relies on a hardcoded Time-based One-Time Password (TOTP) secret and an embedded static token. An attacker who extracts these credentials from the appliance or a compromised device can generate valid authentication tokens and execute arbitrary OS commands with root privileges, resulting in complete system compromise. **Recommendations** Update to version 3.0.0.0 (GA) or later.

**Name of the Vulnerable Software and Affected Versions** Ruckus vRIoT IoT Controller versions prior to 3.0.0.0 **Description** The Ruckus vRIoT IoT Controller firmware contains hardcoded credentials for an operating system user account within an initialization script. The SSH service is network-accessible without IP-based restrictions. While SCP and pseudo-TTY allocation are disabled, an attacker can authenticate using the hardcoded credentials and establish SSH local port forwarding to access the Docker socket. By mounting the host filesystem via Docker, an attacker can escape the container and execute arbitrary OS commands as root on the underlying vRIoT controller, leading to complete system compromise. **Recommendations** Update to version 3.0.0.0 or later.