Priority LOW 24
Wind River VxWorks 7 24.03 through 26.03, a memory leak occurs under specific, non-default configuration states when processing specific service routines, causing the system to terminate operations before releasing alloc…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00098 · Published 2026-09-28 · No fix listed CWE-401
Priority LOW 24
Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properly release allocated kernel memory and system file descriptors before terminating the calling applica…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00098 · Published 2026-09-28 · No fix listed CWE-772
Priority HIGH 72
A mismatch caused by client-triggered server-sent stream resets between HTTP/2 specifications and the internal architectures of some HTTP/2 implementations may result in excessive server resource consumption leading to d…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03637 · Published 2025-08-13 · Fixed in 15-SP5, 15 SP5 +1 CWE-404
Priority LOW 39
An issue was discovered in Wind River VxWorks 7 22.09 and 23.03.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00487 · Published 2024-02-15 · No fix listed CWE-200
Priority HIGH 73
An issue was discovered in Wind River VxWorks 6.9 and 7.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01541 · Published 2023-09-22 · No fix listed CWE-22
Priority LOW 35
An issue was discovered in Wind River VxWorks 6.9 and 7, that allows a specifically crafted packet sent by a Radius server, may cause Denial of Service during the IP Radius access procedure.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01108 · Published 2022-11-25 · No fix listed
Priority LOW 35
In Wind River VxWorks 6.9 and 7, a specific crafted packet may lead to an out-of-bounds read during an IKE initial exchange scenario.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01034 · Published 2022-03-29 · No fix listed CWE-125
Priority LOW 30
An issue was discovered in VxWorks 6.9 through 7.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00876 · Published 2021-11-24 · No fix listed CWE-415
Priority MEDIUM 47
An issue was discovered in Wind River VxWorks 7.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02491 · Published 2021-05-12 · No fix listed CWE-190
Priority LOW 26
An issue was discovered in Wind River VxWorks 7 before 21.03.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01067 · Published 2021-04-13 · No fix listed CWE-125
Priority MEDIUM 48
An issue was discovered in Wind River VxWorks through 6.8.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03099 · Published 2021-04-13 · No fix listed CWE-787
Priority MEDIUM 49
An issue was discovered in Wind River VxWorks before 6.5.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04212 · Published 2021-04-13 · No fix listed CWE-787
Priority MEDIUM 58
The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.18339 · Published 2021-03-25 · Fixed in 111.15.0 CWE-295
Priority MEDIUM 46
A DNS client stack-based buffer overflow in ipdnsc_decode_name() affects Wind River VxWorks 6.5 through 7.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01857 · Published 2021-03-11 · No fix listed CWE-787
Priority LOW 35
In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc().
CVSS 3.1HIGH 7.3· Network · No auth · No interaction · EPSS 0.01542 · Published 2021-02-03 · No fix listed CWE-190
Priority LOW 35
httpRpmFs in WebCLI in Wind River VxWorks 5.5 through 7 SR0640 has no check for an escape from the web root.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01082 · Published 2020-07-23 · No fix listed
Priority LOW 36
The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01377 · Published 2020-04-27 · No fix listed CWE-476
Priority MEDIUM 49
Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04116 · Published 2019-08-14 · No fix listed
Priority MEDIUM 54
Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.08967 · Published 2019-08-09 · No fix listed CWE-120
Priority MEDIUM 62
Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.2325 · Published 2019-08-09 · No fix listed CWE-120
Priority MEDIUM 53
Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.22946 · Published 2019-08-09 · No fix listed CWE-384
Priority HIGH 81
Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.7525 · Published 2019-08-09 · No fix listed CWE-120
Priority MEDIUM 58
Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.59798 · Published 2019-08-09 · No fix listed CWE-401
Priority MEDIUM 41
Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4).
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.03163 · Published 2019-08-09 · No fix listed CWE-362
Priority MEDIUM 49
Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.15882 · Published 2019-08-09 · No fix listed CWE-476
Load more
THREATIST.IORead the docs