Cyber Resilience

CVE-2025-46119

Ruckuswireless Ruckus Unleashed ≤ 200.15.6.212.14

Public PoC
Published
21 July 2025
Modified
17 June 2026
Patch / advisory
View advisory
CVSS Score v3.1 6.3
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
EPSS Score 0.0036 29th percentile
Risk Priority 48 floored blend · peak EPSS

Summary

CVE-2025-46119 is a medium-severity J2EE Misconfiguration: Plaintext Password in Configuration File (CWE-555) vulnerability in Ruckuswireless Ruckus Unleashed. Its CVSS base score is 6.3 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Credentials In Files (T1552.001); ranked at the 29th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

The strongest mitigations our analysis identified map to CM-6 (Configuration Settings) and SC-28 (Protection of Information at Rest) — see the control section below for these in your framework.

EU & UK References

Vulnerability Data

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.27 and 200.18.7.1.323, and in Ruckus ZoneDirector prior to 10.5.1.0.282, where an authenticated request to the management endpoint `/admin/_cmdstat.jsp` discloses the administrator password in a trivially reversible obfuscated form. The…

more

same obfuscation method persists in configuration prior to 200.18.7.1.302, allowing anyone who obtains the system configuration to recover the plaintext credentials.

CWE(s)
CWE-555

Related Threats

MITRE ATT&CK Enterprise Techniques

T1552.001 Credentials In Files Credential Access
Adversaries may search local file systems and remote file shares for files containing insecurely stored credentials.
attack.mitre.org →
T1552 Unsecured Credentials Credential Access
Adversaries may search compromised systems to find and obtain insecurely stored credentials.
attack.mitre.org →
Derived from this CVE’s CWE(s) via the direct CWE→ATT&CK cross-walk.

CVEs Like This One

CVE-2025-46123Same product: Commscope Ruckus C110
CVE-2025-46120Same product: Commscope Ruckus C110
CVE-2025-46122Same product: Commscope Ruckus C110
CVE-2025-46118Same product: Commscope Ruckus C110
CVE-2025-46117Same product: Commscope Ruckus C110
CVE-2025-46116Same product: Commscope Ruckus C110
CVE-2025-46121Same product: Commscope Ruckus C110
CVE-2025-44954Same product: Commscope Ruckus C110
CVE-2025-44957Same product: Commscope Ruckus C110
CVE-2025-44960Same product: Commscope Ruckus C110

Affected Assets

ruckuswireless
ruckus unleashed
≤ 200.15.6.212.14 · 200.17 — 200.17.7.0.139
ruckuswireless
ruckus zonedirector
≤ 10.5.1.0.279

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

CM-6 Configuration Settings good match

CM-6 enforces secure configuration settings that eliminate plaintext passwords from application config files.

SC-28 Protection of Information at Rest good match

SC-28 requires confidentiality protection of information at rest, directly stopping plaintext credential storage.

IA-5 Authenticator Management partial match

IA-5 requires secure authenticator management that structurally prohibits plaintext password storage in files.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.DS-01 mostly match
prevents

Encrypting data-at-rest forces credentials in config files to be protected rather than plaintext.

PR.PS-01 mostly match
prevents

Hardened configuration baselines and reviews directly prevent plaintext credential storage.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

A.8.9 Configuration management mostly match
prevents

Enforces secure configuration management, reducing the risk of plaintext secrets being stored in application config files.

A.5.17 Authentication information partial match
degrades

Requires secure handling and storage of authentication credentials, directly addressing plaintext passwords in config files.

A.8.24 Use of cryptography partial match
prevents

Requires cryptographic protection of sensitive data, which can mitigate plaintext password storage when applied to credentials.

A.8.5 Secure authentication partial match
degrades

Mandates secure authentication mechanisms, which includes protecting credentials from exposure in configuration files.

A.8.28 Secure coding none match
none

Promotes secure coding practices that discourage embedding plaintext passwords in configuration files.

References