CVE-2017-7307 Riverbed RiOS before 9.0.1 does not properly restrict shell access in single-user mode, which makes it easier for physically proximate attackers to obtain root privileges and access decrypted data by....
MediumCVSS 6.8
EPSS 0.33%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Riverbed RiOS before 9.0.1 does not properly restrict shell access in single-user mode, which makes it easier for physically proximate attackers to obtain root privileges and access decrypted data by replacing the /opt/tms/bin/cli file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| riverbed rios | <= 9.0.0b | No fix listed |
References
- seclists.org mailing-list third-party-advisory
- supportkb.riverbed.com mitigation vendor-advisory