Windriver vulnerabilities

Products

• Vxworks 38
• Bsdos 2

Newest

• windriver vxworks An issue was discovered in Wind River VxWorks 7 22.09 and 23.03. If a VxWorks task or POSIX... CVE-2023-51787 7.5 HighFebruary 15, 2024
• windriver vxworks An issue was discovered in Wind River VxWorks 6.9 and 7. The function ``tarExtract`` implements... CVE-2023-38346 8.8 HighSeptember 22, 2023
• windriver vxworks, siemens siprotec 5 6md85 (cp300), siprotec 5 6md86 (cp300) +26 more +28 more An issue was discovered in Wind River VxWorks 6.9 and 7, that allows a specifically crafted... CVE-2022-38767 7.5 HighNovember 25, 2022
• windriver vxworks In Wind River VxWorks 6.9 and 7, a specific crafted packet may lead to an out-of-bounds read... CVE-2022-23937 5.3 MediumMarch 29, 2022
• windriver vxworks An issue was discovered in VxWorks 6.9 through 7. In the IKE component, a specifically crafted... CVE-2021-43268 6.5 MediumNovember 24, 2021
• windriver vxworks, oracle communications eagle +1 more An issue was discovered in Wind River VxWorks 7. The memory allocator has a possible integer... CVE-2020-35198 9.8 CriticalMay 12, 2021
• windriver vxworks XML External Entity Resolution (XXE) in Helix ALM. The XML Import functionality of the... CVE-2021-29997 5.3 MediumApril 13, 2021
• windriver vxworks An issue was discovered in Wind River VxWorks through 6.8. There is a possible stack overflow in... CVE-2021-29999 9.8 CriticalApril 13, 2021
• windriver vxworks, siemens ruggedcom win subscriber station firmware, scalance x200-4 p irt firmware +33 more +35 more An issue was discovered in Wind River VxWorks before 6.5. There is a possible heap overflow in... CVE-2021-29998 9.8 CriticalApril 13, 2021
• openssl, fedoraproject fedora, freebsd +30 more +32 more CA certificate check bypass with X509_V_FLAG_X509_STRICT CVE-2021-3450 Public exploitFix available EPSS 18.3% 7.4 HighMarch 25, 2021
• windriver vxworks, siemens sgt-100 firmware, sgt-200 firmware +5 more +7 more ** UNSUPPORTED WHEN ASSIGNED ** A DNS client stack-based buffer overflow in ipdnsc_decode_name()... CVE-2016-20009 9.8 CriticalMarch 11, 2021
• windriver vxworks, oracle communications eagle +1 more integer overflow in calloc CVE-2020-28895 7.3 HighFebruary 3, 2021
• windriver vxworks httpRpmFs in WebCLI in Wind River VxWorks 5.5 through 7 SR0640 has no check for an escape from... CVE-2020-11440 7.5 HighJuly 23, 2020
• windriver vxworks The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer... CVE-2020-10664 7.5 HighApril 27, 2020
• windriver vxworks, belden garrettcom magnum dx940e firmware, hirschmann hios +4 more +6 more Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client... CVE-2019-12262 9.8 CriticalAugust 14, 2019
• windriver vxworks, belden garrettcom magnum dx940e firmware, hirschmann hios +10 more +12 more Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of... CVE-2019-12261 9.8 CriticalAugust 9, 2019
• windriver vxworks, belden garrettcom magnum dx940e firmware, hirschmann hios +10 more +12 more Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4). This is... CVE-2019-12260 EPSS 23.2% 9.8 CriticalAugust 9, 2019
• windriver vxworks, belden garrettcom magnum dx940e firmware, hirschmann hios +9 more +11 more Wind River VxWorks 6.5 through 6.9 and vx7 has Session Fixation in the TCP component. This is a... CVE-2019-12258 EPSS 22.9% 7.5 HighAugust 9, 2019
• windriver vxworks, belden garrettcom magnum dx940e firmware, hirschmann hios +9 more +11 more Wind River VxWorks 6.5 through 6.9.3 has a Buffer Overflow in the TCP component (issue 1 of 4).... CVE-2019-12255 Public exploit EPSS 75.2% 9.8 CriticalAugust 9, 2019
• windriver vxworks, belden garrettcom magnum dx940e firmware, hirschmann hios +9 more +11 more Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client... CVE-2019-12265 EPSS 59.8% 5.3 MediumAugust 9, 2019
• windriver vxworks, belden garrettcom magnum dx940e firmware, hirschmann hios +9 more +11 more Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4). There... CVE-2019-12263 8.1 HighAugust 9, 2019
• windriver vxworks, belden garrettcom magnum dx940e firmware, hirschmann hios +8 more +10 more Wind River VxWorks 6.9 and vx7 has an array index error in the IGMPv3 client component. There is... CVE-2019-12259 EPSS 15.9% 7.5 HighAugust 9, 2019
• windriver vxworks, belden garrettcom magnum dx940e firmware, hirschmann hios +9 more +11 more Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET... CVE-2019-12256 EPSS 26.8% 9.8 CriticalAugust 9, 2019
• windriver vxworks, belden garrettcom magnum dx940e firmware, hirschmann hios +7 more +9 more Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the DHCP client component. There is an... CVE-2019-12257 EPSS 84.3% 8.8 HighAugust 9, 2019
• windriver vxworks, belden garrettcom magnum dx940e firmware, hirschmann hios +4 more +6 more Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4... CVE-2019-12264 7.1 HighAugust 5, 2019
• windriver vxworks When RPC is enabled in Wind River VxWorks 6.9 prior to 6.9.1, a specially crafted RPC request can... CVE-2019-9865 8.1 HighMay 29, 2019
• windriver vxworks Integer overflow in the _authenticate function in svc_auth.c in Wind River VxWorks 5.5 through 6... CVE-2015-7599 8.1 HighFebruary 7, 2017
• windriver vxworks Wind River VxWorks before 5.5.1, 6.5.x through 6.7.x before 6.7.1.1, 6.8.x before 6.8.3, 6.9.x... CVE-2015-3963 5.8 MediumAugust 4, 2015
• windriver vxworks The web server in Wind River VxWorks 5.5 through 6.9 allows remote attackers to cause a denial of... CVE-2013-0716 5.0 MediumMarch 20, 2013
• windriver vxworks The WebCLI component in Wind River VxWorks 5.5 through 6.9 allows remote authenticated users to... CVE-2013-0715 4.0 MediumMarch 20, 2013
• windriver vxworks IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote attackers to... CVE-2013-0714 10.0 HighMarch 20, 2013
• windriver vxworks IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote authenticated... CVE-2013-0713 6.8 MediumMarch 20, 2013
• windriver vxworks IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote authenticated... CVE-2013-0712 6.8 MediumMarch 20, 2013
• windriver vxworks IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote attackers to cause... CVE-2013-0711 7.8 HighMarch 20, 2013
• windriver vxworks The FTP daemon in Wind River VxWorks does not close the TCP connection after a number of failed... CVE-2010-2968 7.8 HighAugust 4, 2010
• windriver vxworks The loginDefaultEncrypt algorithm in loginLib in Wind River VxWorks before 6.9 does not properly... CVE-2010-2967 7.8 HighAugust 4, 2010
• windriver vxworks The INCLUDE_SECURITY functionality in Wind River VxWorks 6.x, 5.x, and earlier uses the... CVE-2010-2966 7.8 HighAugust 4, 2010
• windriver vxworks, rockwellautomation 1756-enbt\/a firmware +1 more The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the... CVE-2010-2965 EPSS 57.5% 10.0 HighAugust 4, 2010
• force10 ftos, freebsd, netbsd +3 more +5 more The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2)... CVE-2008-2476 9.3 HighOctober 3, 2008
• sendmail, gentoo linux, hp alphaserver sc +6 more +8 more Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via... CVE-2002-1337 Public exploitFix available EPSS 72.6% 10.0 HighMarch 4, 2003
• apple mac os x, macos, cisco ios +11 more +13 more ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts. CVE-1999-0524 Public exploitFix available EPSS 32.2% 2.1 LowAugust 1, 1997