GCVE - cpe:2.3:o:riverbed:rios:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:riverbed:rios:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Riverbed (`0bb0e062-ce66-501f-9d84-f308f1a9c42b`)
Product	Rios (`e6bd9cf2-cab4-5f19-9eaa-65c6b554db69`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-7307`	vulnerable	2026-06-08 05:09:55.735494	Details available Riverbed RiOS before 9.0.1 does not properly restrict shell access in single-user mode, which makes it easier for physically proximate attackers to obtain root privileges and access decrypted data by replacing the /opt/tms/bin/cli file. Published: 2017-04-04T16:00:00.000Z Updated: 2024-08-05T15:56:36.417Z Open on db.gcve.eu Reference links http://seclists.org/fulldisclosure/2017/Feb/25 https://supportkb.riverbed.com/support/index?page=content&id=S30065	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7306`	vulnerable	2026-06-08 05:09:55.735161	Details available Riverbed RiOS through 9.6.0 has a weak default password for the secure vault, which makes it easier for physically proximate attackers to defeat the secure-vault protection mechanism by leveraging knowledge of the password algorithm and the appliance serial number. NOTE: the vendor believes that this does not meet the definition of a vulnerability. The product contains correct computational logic for supporting arbitrary password changes by customers; however, a password change is optional to meet different customers' needs Published: 2017-04-04T16:00:00.000Z Updated: 2024-08-05T15:56:36.420Z Open on db.gcve.eu Reference links http://seclists.org/fulldisclosure/2017/Feb/25 https://supportkb.riverbed.com/support/index?page=content&id=S30065	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7305`	vulnerable	2026-06-08 05:09:55.734674	Details available Riverbed RiOS through 9.6.0 does not require a bootloader password, which makes it easier for physically proximate attackers to defeat the secure-vault protection mechanism via a crafted boot. NOTE: the vendor believes that this does not meet the definition of a vulnerability. The product contains correct computational logic for a bootloader password; however, this password is optional to meet different customers' needs Published: 2017-04-04T16:00:00.000Z Updated: 2024-08-05T15:56:36.396Z Open on db.gcve.eu Reference links http://seclists.org/fulldisclosure/2017/Feb/25 https://supportkb.riverbed.com/support/index?page=content&id=S30065	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-5670`	vulnerable	2026-06-08 05:09:47.840847	Details available Riverbed RiOS through 9.6.0 deletes the secure vault with the rm program (not shred or srm), which makes it easier for physically proximate attackers to obtain sensitive information by reading raw disk blocks. Published: 2017-04-04T16:00:00.000Z Updated: 2024-08-05T15:11:48.380Z Open on db.gcve.eu Reference links http://seclists.org/fulldisclosure/2017/Feb/25 https://sysdream.com/news/lab/2017-02-15-riverbed-rios-insecure-cryptographic-storage-cve-2017-5670/ http://www.securityfocus.com/bid/96175 https://supportkb.riverbed.com/support/index?page=content&id=S30065	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.