Windriver Vxworks vulnerabilities
38 vulnerabilities
Known vulnerabilities in Windriver Vxworks, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2013-0716windrivervxworks
EPSS score2.37%
The web server in Wind River VxWorks 5.5 through 6.9 allows remote attackers to cause a denial of service (daemon crash) via a crafted URI.CVE-2013-0713windrivervxworksEPSS score2.18%
IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote authenticated users to cause a denial of service (daemon outage) via a crafted pty request.CVE-2013-0714windrivervxworksEPSS score6.35%
IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote attackers to execute arbitrary code or cause a denial of service (daemon hang) via a crafted public-key authentication request.CVE-2013-0715windrivervxworksEPSS score1.88%
The WebCLI component in Wind River VxWorks 5.5 through 6.9 allows remote authenticated users to cause a denial of service (CLI session crash) via a crafted command string.CVE-2013-0711windrivervxworksEPSS score3.27%
IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote attackers to cause a denial of service (daemon outage) via a crafted authentication request.CVE-2013-0712windrivervxworksEPSS score2.61%
IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote authenticated users to cause a denial of service (daemon outage) via a crafted packet.CVE-2021-43268windrivervxworksEPSS score0.88%
An issue was discovered in VxWorks 6.9 through 7. In the IKE component, a specifically crafted packet may lead to reading beyond the end of a buffer, or a double free.CVE-2021-29999windrivervxworksEPSS score1.79%
An issue was discovered in Wind River VxWorks through 6.8. There is a possible stack overflow in dhcp server.CVE-2021-29998siemenssinamics_perfect_harmony_gh180_firmware+1EPSS score2.39%
An issue was discovered in Wind River VxWorks before 6.5. There is a possible heap overflow in dhcp client.CVE-2021-29997windrivervxworksEPSS score1.03%
An issue was discovered in Wind River VxWorks 7 before 21.03. A specially crafted packet may lead to buffer over-read on IKE.CVE-2015-7599windrivervxworksEPSS score5.91%
Integer overflow in the _authenticate function in svc_auth.c in Wind River VxWorks 5.5 through 6.9.4.1, when the Remote Procedure Call (RPC) protocol is enabled, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a username and password.CVE-2015-3963windrivervxworksEPSS score3.74%
Wind River VxWorks before 5.5.1, 6.5.x through 6.7.x before 6.7.1.1, 6.8.x before 6.8.3, 6.9.x before 6.9.4.4, and 7.x before 7 ipnet_coreip 1.2.2.0, as used on Schneider Electric SAGE RTU devices before J2 and other devices, does not properly generate TCP initial sequence number (ISN) values, which makes it easier for remote attackers to spoof TCP sessions by predicting an ISN value.CVE-2016-20009windrivervxworksEPSS score1.86%
A DNS client stack-based buffer overflow in ipdnsc_decode_name() affects Wind River VxWorks 6.5 through 7. NOTE: This vulnerability only affects products that are no longer supported by the maintainerCVE-2020-11440windrivervxworksEPSS score1.08%
httpRpmFs in WebCLI in Wind River VxWorks 5.5 through 7 SR0640 has no check for an escape from the web root.CVE-2020-10664windrivervxworksEPSS score1.38%
The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference.CVE-2020-28895oraclecommunications_eagle+1EPSS score1.57%
In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc(). As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption.CVE-2020-35198oraclecommunications_eagle+1EPSS score2.49%
An issue was discovered in Wind River VxWorks 7. The memory allocator has a possible integer overflow in calculating a memory block's size to be allocated by calloc(). As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption.CVE-2008-2476freebsdfreebsd+2EPSS score7.42%
The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2) OpenBSD 4.2 and 4.3, (3) NetBSD, (4) Force10 FTOS before E7.7.1.1, (5) Juniper JUNOS, and (6) Wind River VxWorks 5.x through 6.4 does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service (loss of connectivity) or read private network traffic via a spoofed message that modifies the Forward Information Base (FIB).CVE-2022-38767windrivervxworksEPSS score1.09%
An issue was discovered in Wind River VxWorks 6.9 and 7, that allows a specifically crafted packet sent by a Radius server, may cause Denial of Service during the IP Radius access procedure.CVE-2022-23937windrivervxworksEPSS score1.03%
In Wind River VxWorks 6.9 and 7, a specific crafted packet may lead to an out-of-bounds read during an IKE initial exchange scenario.