RioRey RIOS 4.6.6 and 4.7.0 uses an undocumented, hard-coded username (dbadmin) and password (sq!us3r) for an SSH tunnel, which allows remote attackers to gain privileges via port 8022.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Rios | Riorey | 4.6.6 (including) | 4.6.6 (including) |
| Rios | Riorey | 4.7.0 (including) | 4.7.0 (including) |