Vulnerability Description
In RUCKUS Network Director (RND) < 4.5.0.56, the OVA appliance contains hardcoded SSH keys for the postgres user. These keys are identical across all deployments, allowing an attacker with network access to authenticate via SSH without a password. Once authenticated, the attacker can access the PostgreSQL database with superuser privileges, create administrative users for the web interface, and potentially escalate privileges further.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Commscope | Ruckus Network Director | < 4.5.0.56 |
Related Weaknesses (CWE)
References
- https://github.com/marlinkcyber/advisories/blob/main/advisories/MCSAID-2025-012-ExploitThird Party Advisory
- https://webresources.commscope.com/download/assets/RUCKUS+Network+Director%3A+CrVendor Advisory
FAQ
What is CVE-2025-67305?
CVE-2025-67305 is a vulnerability with a CVSS score of 9.8 (CRITICAL). In RUCKUS Network Director (RND) < 4.5.0.56, the OVA appliance contains hardcoded SSH keys for the postgres user. These keys are identical across all deployments, allowing an attacker with network acc...
How severe is CVE-2025-67305?
CVE-2025-67305 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2025-67305?
Check the references section above for vendor advisories and patch information. Affected products include: Commscope Ruckus Network Director.