CVE-2009-3710: Riorey Rios

High severity, CVSS 10.0. EPSS: 8.5% chance of exploitation in the next 30 days.

RioRey RIOS 4.6.6 and 4.7.0 uses an undocumented, hard-coded username (dbadmin) and password (sq!us3r) for an SSH tunnel, which allows remote attackers to gain privileges via port 8022.

Affected products

• Riorey Rios: version 4.6.6 only; version 4.7.0 only

Published 2009-10-16. Last modified 2026-06-16.