Vulnerabilities > Riverbed > Rios > 9.0.1

DATE CVE VULNERABILITY TITLE RISK
2017-04-04 CVE-2017-7306 Weak Password Requirements vulnerability in Riverbed Rios
Riverbed RiOS through 9.6.0 has a weak default password for the secure vault, which makes it easier for physically proximate attackers to defeat the secure-vault protection mechanism by leveraging knowledge of the password algorithm and the appliance serial number.
high complexity
riverbed CWE-521
6.4
2017-04-04 CVE-2017-7305 Weak Password Requirements vulnerability in Riverbed Rios
Riverbed RiOS through 9.6.0 does not require a bootloader password, which makes it easier for physically proximate attackers to defeat the secure-vault protection mechanism via a crafted boot.
low complexity
riverbed CWE-521
4.6
2017-04-04 CVE-2017-5670 Information Exposure vulnerability in Riverbed Rios
Riverbed RiOS through 9.6.0 deletes the secure vault with the rm program (not shred or srm), which makes it easier for physically proximate attackers to obtain sensitive information by reading raw disk blocks.
low complexity
riverbed CWE-200
4.6