CVE-2017-7307: Medium severity Riverbed RiOS vulnerability
Riverbed RiOS before 9.0.1 does not properly restrict shell access in single-user mode, which makes it easier for physically proximate attackers to obtain root privileges and access decrypted data by replacing the /opt/tms/bin/cli file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Riverbed RiOSto a version that resolves this vulnerability.Fixed in 9.0.1 - Compensating control
Physically restrict access to the system and protect the /opt/tms/bin/cli file from tampering by physically proximate attackers.
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7307?
CVE-2017-7307 is considered to have a high severity due to the risk of root privilege escalation.
How do I fix CVE-2017-7307?
To fix CVE-2017-7307, upgrade to Riverbed RiOS version 9.0.1 or later.
What impact does CVE-2017-7307 have on affected systems?
CVE-2017-7307 allows physical attackers to gain root access and potentially access sensitive decrypted data.
Who is affected by CVE-2017-7307?
CVE-2017-7307 affects users of Riverbed RiOS versions prior to 9.0.1.
What exploitation methods are possible with CVE-2017-7307?
Exploitation of CVE-2017-7307 can occur through physical access to the device in single-user mode.