CVE-2017-5670

Severity: medium (CVSS 4.6 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-04-04 · updated 2026-06-17
Weakness: CWE-200

Description

Riverbed RiOS through 9.6.0 deletes the secure vault with the rm program (not shred or srm), which makes it easier for physically proximate attackers to obtain sensitive information by reading raw disk blocks.

Affected products

Riverbed Rios: through 9.6.0

References

http://seclists.org/fulldisclosure/2017/Feb/25
http://www.securityfocus.com/bid/96175
https://supportkb.riverbed.com/support/index?page=content&id=S30065
https://sysdream.com/news/lab/2017-02-15-riverbed-rios-insecure-cryptographic-storage-cve-2017-5670/
http://seclists.org/fulldisclosure/2017/Feb/25
http://www.securityfocus.com/bid/96175
https://supportkb.riverbed.com/support/index?page=content&id=S30065
https://sysdream.com/news/lab/2017-02-15-riverbed-rios-insecure-cryptographic-storage-cve-2017-5670/

Get alerted when CVE-2017-5670 or the next vulnerability affects your stack