PT-2025-31827 · Ruckus · Ruckus Network Director

Noam Moshe · Published 2025-07-08 · Updated 2025-08-04 · CVE-2025-44963

Positive Technologies (AI Summary)

CVSS v3.1

9.0

Critical

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions RUCKUS Network Director versions prior to 4.5

Description RUCKUS Network Director (RND) is susceptible to an issue allowing an attacker to spoof an administrator JSON Web Token (JWT) if they possess knowledge of a hardcoded secret key.

Recommendations Update RUCKUS Network Director to version 4.5 or later.

Fix

Weakness Enumeration

CWE-321

Related Identifiers

BDU:2026-00184

CVE-2025-44963

Affected Products

Ruckus Network Director

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-44963 · Security Note
• https://osv.dev/vulnerability/CVE-2025-44963 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-00184 · Security Note
• https://webresources.commscope.com/download/assets/FAQ+Security+Advisory%3A+ID+20250710/225f44ac3bd311f095821adcaa92e24e · Vendor Advisory
• https://claroty.com/team82/disclosure-dashboard/cve-2025-44963 · Note
• https://kb.cert.org/vuls/id/613753 · Note
• https://twitter.com/CveFindCom/status/1952409372769816923 · Twitter Post
• https://twitter.com/CVEnew/status/1952404832603832715 · Twitter Post
• https://t.me/CVEtracker/29101 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2025071034 · Note