Priority HIGH 82
The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and other products, allows remote attackers to read or m…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.57544 · Published 2010-08-04 · No fix listed CWE-863
Priority HIGH 81
Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.7525 · Published 2019-08-09 · No fix listed CWE-120
Priority HIGH 81
Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.72644 · Published 2004-09-01 · Fixed CWE-120
Priority HIGH 79
Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.84297 · Published 2019-08-09 · No fix listed CWE-120
Priority HIGH 73
An issue was discovered in Wind River VxWorks 6.9 and 7.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01541 · Published 2023-09-22 · No fix listed CWE-22
Priority HIGH 72
A mismatch caused by client-triggered server-sent stream resets between HTTP/2 specifications and the internal architectures of some HTTP/2 implementations may result in excessive server resource consumption leading to d…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03637 · Published 2025-08-13 · Fixed in 15-SP5, 15 SP5 +1 CWE-404
Priority MEDIUM 64
Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.26828 · Published 2019-08-09 · No fix listed CWE-120
Priority MEDIUM 62
Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.2325 · Published 2019-08-09 · No fix listed CWE-120
Priority MEDIUM 58
The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.18339 · Published 2021-03-25 · Fixed in 111.15.0 CWE-295
Priority MEDIUM 58
Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.59798 · Published 2019-08-09 · No fix listed CWE-401
Priority MEDIUM 54
Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.08967 · Published 2019-08-09 · No fix listed CWE-120
Priority MEDIUM 53
Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.22946 · Published 2019-08-09 · No fix listed CWE-384
Priority MEDIUM 52
IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote attackers to execute arbitrary code or cause a denial of service (daemon hang) via a crafted public-key authentication request.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06353 · Published 2013-03-20 · No fix listed CWE-20
Priority MEDIUM 50
The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2) OpenBSD 4.2 and 4.3, (3) NetBSD, (4) Force10 FTOS before E7.7.1.1, (5) Juniper JUNOS, and (6) Wind River VxWorks 5.x through 6…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.07425 · Published 2008-10-03 · No fix listed CWE-20
Priority MEDIUM 49
An issue was discovered in Wind River VxWorks before 6.5.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04212 · Published 2021-04-13 · No fix listed CWE-787
Priority MEDIUM 49
Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04116 · Published 2019-08-14 · No fix listed
Priority MEDIUM 49
Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.15882 · Published 2019-08-09 · No fix listed CWE-476
Priority MEDIUM 48
An issue was discovered in Wind River VxWorks through 6.8.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03099 · Published 2021-04-13 · No fix listed CWE-787
Priority MEDIUM 47
An issue was discovered in Wind River VxWorks 7.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02491 · Published 2021-05-12 · No fix listed CWE-190
Priority MEDIUM 46
A DNS client stack-based buffer overflow in ipdnsc_decode_name() affects Wind River VxWorks 6.5 through 7.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01857 · Published 2021-03-11 · No fix listed CWE-787
Priority MEDIUM 44
Integer overflow in the _authenticate function in svc_auth.c in Wind River VxWorks 5.5 through 6.9.4.1, when the Remote Procedure Call (RPC) protocol is enabled, allows remote attackers to cause a denial of service (cras…
CVSS 3.0HIGH 8.1· Network · No auth · No interaction · EPSS 0.0591 · Published 2017-02-07 · No fix listed CWE-190
Priority MEDIUM 43
ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.
CVSS 3.1MEDIUM 4.0· Local · No auth · No interaction · EPSS 0.32154 · Published 2000-02-04 · No fix listed CWE-200
Priority MEDIUM 42
Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component.
CVSS 3.1HIGH 7.1· Adjacent network · No auth · No interaction · EPSS 0.08311 · Published 2019-08-05 · No fix listed CWE-88
Priority MEDIUM 41
Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4).
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.03163 · Published 2019-08-09 · No fix listed CWE-362
Priority MEDIUM 40
IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote attackers to cause a denial of service (daemon outage) via a crafted authentication request.
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.03274 · Published 2013-03-20 · No fix listed CWE-20
Load more
THREATIST.IORead the docs