Priority MEDIUM 45
Hirschmann HiOS 07.1.01, 07.1.02, and 08.1.00 through 08.5.xx and HiSecOS 03.3.00 through 03.5.01 allow remote attackers to change the credentials of existing users.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01264 · Published 2021-05-17 · No fix listed CWE-287
Priority LOW 30
Hirschmann OS2, RSP, and RSPE devices before HiOS 08.3.00 allow a denial of service.
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00593 · Published 2021-02-11 · No fix listed CWE-835
Priority MEDIUM 45
A buffer overflow vulnerability was found in some devices of Hirschmann Automation and Control HiOS and HiSecOS.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01646 · Published 2020-04-03 · No fix listed CWE-12
Priority MEDIUM 49
Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04116 · Published 2019-08-14 · No fix listed
Priority MEDIUM 54
Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.08967 · Published 2019-08-09 · No fix listed CWE-120
Priority MEDIUM 62
Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.2325 · Published 2019-08-09 · No fix listed CWE-120
Priority MEDIUM 53
Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.22946 · Published 2019-08-09 · No fix listed CWE-384
Priority HIGH 81
Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.7525 · Published 2019-08-09 · No fix listed CWE-120
Priority MEDIUM 58
Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.59798 · Published 2019-08-09 · No fix listed CWE-401
Priority MEDIUM 41
Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4).
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.03163 · Published 2019-08-09 · No fix listed CWE-362
Priority MEDIUM 49
Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.15882 · Published 2019-08-09 · No fix listed CWE-476
Priority MEDIUM 64
Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.26828 · Published 2019-08-09 · No fix listed CWE-120
Priority HIGH 79
Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.84297 · Published 2019-08-09 · No fix listed CWE-120
Priority MEDIUM 42
Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component.
CVSS 3.1HIGH 7.1· Adjacent network · No auth · No interaction · EPSS 0.08311 · Published 2019-08-05 · No fix listed CWE-88
THREATIST.IORead the docs