CVE-2009-3710

RioRey RIOS 4.6.6 and 4.7.0 uses an undocumented, hard-coded username (dbadmin) and password (sq!us3r) for an SSH tunnel, which allows remote attackers to gain privileges via port 8022.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2009-10-16

Last modified

2024-09-17

Weaknesses

CWE-255

Affected products

• Rios (Riorey)

References

• http://osvdb.org/58858
• http://packetstormsecurity.org/0910-exploits/riorey-passwd.txt
• http://secunia.com/advisories/36971