CVE-2025-69425
CRITICAL EPSS 48.5%
Published Jan 9, 20265mo ago · Modified Jun 17, 20261w ago
10.0 CVSS 4.0
Published Jan 9, 2026 5mo ago
Last Modified Jun 17, 2026 1w ago
Description
The Ruckus vRIoT IoT Controller firmware versions prior to 3.0.0.0 (GA) expose a command execution service on TCP port 2004 running with root privileges. Authentication to this service relies on a hardcoded Time-based One-Time Password (TOTP) secret and an embedded static token. An attacker who extracts these credentials from the appliance or a compromised device can generate valid authentication tokens and execute arbitrary OS commands with root privileges, resulting in complete system compromise.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope X
Threat Intelligence
EPSS Exploit Probability
48.5% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 2
CWE-306 Missing Authentication for Critical Function Authentication
CWE-798 Use of Hard-coded Credentials Authentication
References 2
- support.ruckuswireless.com https://support.ruckuswireless.com/security_bulletins/336
- vulncheck.com https://www.vulncheck.com/advisories/ruckus-vriot-iot-controller-hardcoded-tokens-rce
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.