{"id":"CVE-2010-2965","aliases":["EUVD-2010-2969","GHSA-4hhv-jc45-cmpc"],"status":"published","title":"The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the...","description":"The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and other products, allows remote attackers to read or modify arbitrary memory locations, perform function calls, or manage tasks via requests to UDP port 17185, a related issue to CVE-2005-3804.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.57544,"percentile":0.99086,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-863"],"published":"2010-08-04T21:00:00Z","modified":"2026-06-16T23:21:51Z","products":[{"vendor":"rockwellautomation","product":"1756-enbt\\/a_firmware"},{"vendor":"windriver","product":"vxworks"}],"references":[{"url":"http://www.kb.cert.org/vuls/id/MAPG-86FPQL","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"http://rockwellautomation.custhelp.com/cgi-bin/rockwellautomation.cfg/php/enduser/std_adp.php?p_faqid=69735","tags":["x_refsource_CONFIRM","x_transferred","Permissions Required"]},{"url":"http://www.kb.cert.org/vuls/id/362332","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://support.windriver.com/olsPortal/faces/maintenance/downloadDetails.jspx?contentId=033708","tags":["x_refsource_CONFIRM","x_transferred","Permissions Required"]},{"url":"http://www.kb.cert.org/vuls/id/MAPG-86EPFA","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"http://blog.metasploit.com/2010/08/vxworks-vulnerabilities.html","tags":["x_refsource_MISC","x_transferred","Not Applicable"]},{"url":"http://seclists.org/fulldisclosure/2025/Jan/10"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2965"},{"url":"https://github.com/advisories/GHSA-4hhv-jc45-cmpc"}],"sources":{"cve":[{"id":"CVE-2010-2965","description":"The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and other products, allows remote attackers to read or modify arbitrary memory locations, perform function calls, or manage tasks via requests to UDP port 17185, a related issue to CVE-2005-3804.","status":"published","published":"2010-08-04T21:00:00Z","modified":"2026-05-28T18:59:40.978Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:33:26.665532Z"}],"euvd":[{"id":"EUVD-2010-2969","description":"The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and other products, allows remote attackers to read or modify arbitrary memory locations, perform function calls, or manage tasks via requests to UDP port 17185, a related issue to CVE-2005-3804.","status":"published","published":"2010-08-04T21:00:00Z","modified":"2026-05-28T18:59:40Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T18:21:02.186346Z"}],"ghsa":[{"id":"GHSA-4hhv-jc45-cmpc","title":"The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the...","description":"The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and other products, allows remote attackers to read or modify arbitrary memory locations, perform function calls, or manage tasks via requests to UDP port 17185, a related issue to CVE-2005-3804.","status":"published","published":"2022-05-17T05:49:23Z","modified":"2026-05-28T21:31:44Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T15:08:22.24664Z"}],"nvd":[{"id":"CVE-2010-2965","description":"The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and other products, allows remote attackers to read or modify arbitrary memory locations, perform function calls, or manage tasks via requests to UDP port 17185, a related issue to CVE-2005-3804.","status":"published","published":"2010-08-05T13:22:29.793Z","modified":"2026-06-16T23:21:51.09Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:01:49.736647Z"}]}}