CVE-2017-7306 - CVE House
Back to Database
Status published Unknown CVE-2017-7306

Riverbed RiOS through 9.6.0 has a weak default password for...

Vulnerability Description

Riverbed RiOS through 9.6.0 has a weak default password for the secure vault, which makes it easier for physically proximate attackers to defeat the secure-vault protection mechanism by leveraging knowledge of the password algorithm and the appliance serial number. NOTE: the vendor believes that this does not meet the definition of a vulnerability. The product contains correct computational logic for supporting arbitrary password changes by customers; however, a password change is optional to meet different customers' needs

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-7306

Credits & Attribution

No credits recorded in the NVD database.

References

More from riverbed

View All →
CVE-2021-43271
Riverbed AppResponse 11.8.0, 11.8.5, 11.8.5a, 11.9.0, 11.9.0a, 11.10.0, 11.11.0, 11.11.0a,...
Medium 6.8
CVE-2020-15593
SteelCentral Aternity Agent 11.0.0.120 on Windows mishandles IPC. It uses...
High 7.8
CVE-2020-15592
SteelCentral Aternity Agent before 11.0.0.120 on Windows allows Privilege Escalation...
High 7.5
CVE-2017-7693
Directory traversal vulnerability in viewer_script.jsp in Riverbed OPNET App Response...
Medium 6.5
CVE-2017-7307
Riverbed RiOS before 9.0.1 does not properly restrict shell access...
Medium 6.8

Affected Vendor

Affected Software

rios
Vulnerable Versions:
0

Timeline

Official Publish: April 4th, 2017
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.