Ruckus vRIoT IoT Controller Command Execution Vulnerability via Hardcoded Tokens

A command execution vulnerability has been identified in the Ruckus vRIoT IoT Controller, affecting firmware versions through 2.4.0.0 (GA) and 2.3.1.0 (MR). The vulnerability arises from a command execution service running on TCP port 2004 with root privileges. Authentication for this service is based on a hardcoded Time-based One-Time Password (TOTP) secret and an embedded static token. An attacker who extracts these credentials from the appliance or a compromised device can generate valid authentication tokens to execute arbitrary operating system commands with root privileges, leading to complete system compromise.

Impact

Exploitation of this vulnerability allows for arbitrary command execution with root privileges, resulting in full control over the affected system.

Remediation

Users are advised to upgrade to Ruckus IoT Controller version 3.0.0.0 (GA) or later.