CVE-2017-7305: Medium severity Riverbed RiOS vulnerability
DISPUTED Riverbed RiOS through 9.6.0 does not require a bootloader password, which makes it easier for physically proximate attackers to defeat the secure-vault protection mechanism via a crafted boot. NOTE: the vendor believes that this does not meet the definition of a vulnerability. The product contains correct computational logic for a bootloader password; however, this password is optional to meet different customers' needs.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7305?
CVE-2017-7305 is disputed by the vendor and is not classified as a severity vulnerability.
How do I fix CVE-2017-7305?
There is no official fix for CVE-2017-7305 as the vendor does not acknowledge it as a vulnerability.
What does CVE-2017-7305 affect?
CVE-2017-7305 affects Riverbed RiOS versions up to and including 9.6.0.
What is the main issue with CVE-2017-7305?
CVE-2017-7305 allows physical attackers to bypass the secure-vault mechanism due to lack of a bootloader password.
Has CVE-2017-7305 been addressed by Riverbed?
Riverbed has not addressed CVE-2017-7305, stating it does not meet their definition of a vulnerability.