PT-2025-30280 · Commscope · Ruckus Zonedirector+1

René Ammerlaan

·

Publicado

2025-07-21

·

Atualizado

2025-07-31

·

CVE-2025-46118

CVSS v3.1

5.3

Média

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions CommScope Ruckus Unleashed versions prior to 200.15.6.212.14 and 200.17.7.0.139 CommScope Ruckus ZoneDirector versions prior to 10.5.1.0.279
Description An issue was discovered where hard-coded credentials for the ftpuser account provide FTP access to the controller. This enables a remote attacker to upload or retrieve arbitrary files from writable firmware directories, potentially exposing sensitive information or compromising the controller.
Recommendations CommScope Ruckus Unleashed versions prior to 200.15.6.212.14: Update to version 200.15.6.212.14 or later. CommScope Ruckus Unleashed versions prior to 200.17.7.0.139: Update to version 200.17.7.0.139 or later. CommScope Ruckus ZoneDirector versions prior to 10.5.1.0.279: Update to version 10.5.1.0.279 or later.

Exploit

Correção

Improper Access Control

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2025-46118

Produtos afetados

Ruckus Unleashed
Ruckus Zonedirector