Riverbed Steelcentral Aternity Agent
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Riverbed Steelcentral Aternity Agent.
By the Year
In 2026 there have been 0 vulnerabilities in Riverbed Steelcentral Aternity Agent. Last year, in 2025 Steelcentral Aternity Agent had 1 security vulnerability published. Right now, Steelcentral Aternity Agent is on track to have less security vulnerabilities in 2026 than it did last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 0 | 0.00 |
| 2025 | 1 | 0.00 |
It may take a day or so for new Steelcentral Aternity Agent vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Riverbed Steelcentral Aternity Agent Security Vulnerabilities
Riverbed SteelCentral NetProfiler/NetExpress 10.8.7 - Auth RCE via SQLi & CmdExec
CVE-2025-34112
- July 15, 2025
An authenticated multi-stage remote code execution vulnerability exists in Riverbed SteelCentral NetProfiler and NetExpress 10.8.7 virtual appliances. A SQL injection vulnerability in the '/api/common/1.0/login' endpoint can be exploited to create a new user account in the appliance database. This user can then trigger a command injection vulnerability in the '/index.php?page=licenses' endpoint to execute arbitrary commands. The attacker may escalate privileges to root by exploiting an insecure sudoers configuration that allows the 'mazu' user to execute arbitrary commands as root via SSH key extraction and command chaining. Successful exploitation allows full remote root access to the virtual appliance.
SQL Injection
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Riverbed Steelcentral Aternity Agent or by Riverbed? Click the Watch button to subscribe.
