critical10.0Public exploit code
CVE-2009-3710
RioRey RIOS 4.6.6 and 4.7.0 uses an undocumented, hard-coded username (dbadmin) and password (sq!us3r) for an SSH tunnel, which allows remote attackers to gain…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Riorey RIOS 4.7.0 - Hard-Coded Password2009-10-08 · remote · hardware · Verified
Impact
RioRey RIOS 4.6.6 and 4.7.0 uses an undocumented, hard-coded username (dbadmin) and password (sq!us3r) for an SSH tunnel, which allows remote attackers to gain privileges via port 8022.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Riorey | Rios | Versions 4.6.6, 4.7.0 |