Riverbed

Records17All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Riverbed records in CISA KEV

No Riverbed vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Steelcentral Appinternals Dynamic Sampling Agent 7 records MEDIUM Rios 4 records LOW Steelcentral Aternity Agent 2 records LOW Appresponse 1 record LOW Opnet App Response Xpert 1 record LOW Steelapp Traffic Manager 1 record LOW Steelcentral Appinternals 1 record LOW

Records

4 records in Rios · all components

TI-2017-04979 CVE-2017-7307 · GHSA-5xh4-q744-67gj

Riverbed RiOS before 9.0.1 does not properly restrict shell access in single-user mode…

LOW 30

Riverbed RiOS before 9.0.1 does not properly restrict shell access in single-user mode, which makes it easier for physically proximate attackers to obtain root privileges and access decrypted data by replacing the /opt/t…

CVSS 3.0MEDIUM 6.8 Physical No auth No interaction EPSS 0.00333 Published 2017-04-04 No fix listed CWE-732

TI-2017-04978 CVE-2017-7306 · GHSA-hfgj-gwp8-p5ph

Riverbed RiOS through 9.6.0 has a weak default password for the secure vault, which makes…

LOW 30

Riverbed RiOS through 9.6.0 has a weak default password for the secure vault, which makes it easier for physically proximate attackers to defeat the secure-vault protection mechanism by leveraging knowledge of the passwo…

CVSS 3.1MEDIUM 6.4 Physical No auth No interaction EPSS 0.00361 Published 2017-04-04 No fix listed CWE-521

TI-2017-04977 CVE-2017-7305 · GHSA-q8wx-8fq9-4wx8

Riverbed RiOS through 9.6.0 does not require a bootloader password, which makes it easier…

LOW 23

Riverbed RiOS through 9.6.0 does not require a bootloader password, which makes it easier for physically proximate attackers to defeat the secure-vault protection mechanism via a crafted boot.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.0028 Published 2017-04-04 No fix listed CWE-521

TI-2017-03670 CVE-2017-5670 · GHSA-hcf7-f32r-4jgm

Riverbed RiOS through 9.6.0 deletes the secure vault with the rm program (not shred or…

LOW 22

Riverbed RiOS through 9.6.0 deletes the secure vault with the rm program (not shred or srm), which makes it easier for physically proximate attackers to obtain sensitive information by reading raw disk blocks.

CVSS 3.0MEDIUM 4.6 Physical No auth No interaction EPSS 0.0042 Published 2017-04-04 No fix listed CWE-200

Open these records in search →

Critical	4
High	4
Medium	9
Low	0
No CVSS	0