PT-2017-17891 · Riverbed · Riverbed Opnet App Response Xpert

Published 2017-08-26 · Updated 2017-09-02 · CVE-2017-7693

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Riverbed OPNET App Response Xpert (ARX) version 9.6.1

Description The issue allows remote authenticated users to inject arbitrary commands to read OS files due to a directory traversal vulnerability in viewer script.jsp.

Recommendations For Riverbed OPNET App Response Xpert (ARX) version 9.6.1, consider restricting access to the viewer script.jsp file until a patch is available. As a temporary workaround, limit the ability to inject arbitrary commands to prevent unauthorized file access.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2017-7693

Affected Products

Riverbed Opnet App Response Xpert

References · 3

• 🔥 http://arthrocyber.com/research#finding_5 · Exploit
• https://osv.dev/vulnerability/CVE-2017-7693 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-7693 · Security Note