CVE-2025-44963HIGH 8.1EPSS p48.6%

CVE-2025-44963CVE-2025-44963

Description

RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded value of a certain secret key.

Scoring

CVSS 3.18.1 (HIGH)
VectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS0.63% probability of exploitation · percentile 48.6% · 2026-10-05T12:00:23Z
Published2025-08-04
Last modified2025-11-03

Underlying weaknesses· 1

CWE-321

References

  1. https://claroty.com/team82/disclosure-dashboard/cve-2025-44963
  2. https://kb.cert.org/vuls/id/613753
  3. https://webresources.commscope.com/download/assets/FAQ+Security+Advisory%3A+ID+20250710/225f44ac3bd311f095821adcaa92e24e
  4. https://www.kb.cert.org/vuls/id/613753

1

TypeTargetConfidenceTier
WeaknessUse of Hard-coded Cryptographic Keycwe-3210%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2025-44955
CVE
CVE-2025-67305
CVE
CVE-2025-44954
CVE
CVE-2025-44957
CVE
CVE-2025-41672
CVE
CVE-2025-44961
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.