CVE-2017-7306: Medium severity Riverbed RiOS vulnerability
DISPUTED Riverbed RiOS through 9.6.0 has a weak default password for the secure vault, which makes it easier for physically proximate attackers to defeat the secure-vault protection mechanism by leveraging knowledge of the password algorithm and the appliance serial number. NOTE: the vendor believes that this does not meet the definition of a vulnerability. The product contains correct computational logic for supporting arbitrary password changes by customers; however, a password change is optional to meet different customers' needs.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7306?
The severity of CVE-2017-7306 is considered moderate due to the weak default password for the secure vault.
How do I fix CVE-2017-7306?
To fix CVE-2017-7306, update to a version of Riverbed RiOS later than 9.6.0 where the weak default password issue has been addressed.
Who is affected by CVE-2017-7306?
CVE-2017-7306 affects users of Riverbed RiOS versions up to and including 9.6.0.
What risk does CVE-2017-7306 pose to users?
CVE-2017-7306 poses a risk that physically proximate attackers can exploit the weak password to gain access to protected secure vaults.
Is there a workaround for CVE-2017-7306?
The primary workaround for CVE-2017-7306 is to change the default password to a stronger, unique password if upgrading is not immediately possible.