Security Bulletins

Security Bulletin 20251212

Title: RUCKUS IOT Controller vulnerabilities in Management Interface Authentication and Access Control Description:

RUCKUS IOT Controller running some versions of software contain a number of vulnerabilities concerning authentication, access control, and privilege escalation for management interfaces. In the worst-case scenario, these vulnerabilities allow a remote attacker to gain shell access with root privilege to the vulnerable device.

Release Date:
December 05, 2025
Edit Date:
December 23, 2025
Version:
1.0

Applicable To The Following Products

RUCKUS IoT Controller

The RUCKUS IoT Controller is a virtual controller that integrates with the RUCKUS SmartZone controller to perform connectivity, device, and security management functions.

Recommended Software:
Stability Release:
Base release:
RUCKUS IoT 2.4.0.0 (GA) vRIoT Server Software Release for HyperVisor (.tar.gz upgrade image)

Working...Please wait

This is here to prevent you from accidentally submitting twice.

The page will automatically refresh.

Alert!!

Close