Lucene search

[email protected]CVE-2017-7307

HistoryApr 04, 2017 - 4:59 p.m.

CVE-2017-7307

2017-04-0416:59:00

CWE-732

[email protected]

web.nvd.nist.gov

riverbed

rios

cve-2017-7307

security vulnerability

local access

data decryption

shell access

single-user mode

root privileges

physical proximity

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.8 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.5%

JSON

Riverbed RiOS before 9.0.1 does not properly restrict shell access in single-user mode, which makes it easier for physically proximate attackers to obtain root privileges and access decrypted data by replacing the /opt/tms/bin/cli file.

Affected configurations

NVD

Node

riverbedriosRange≤9.0.0b

CPENameOperatorVersion
riverbed:riosriverbed riosle9.0.0b

CPE	Name	Operator	Version
riverbed:rios	riverbed rios	le	9.0.0b

References

seclists.org/fulldisclosure/2017/Feb/25

supportkb.riverbed.com/support/index?page=content&id=S30065

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.8 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.5%

JSON

Related for CVE-2017-7307

prion1 nvd1 cvelist1