Login Request a demo
VX
Product
Vxworks
by Windriver · last CVE Feb 15, 2024
38
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities38In the news0Timeline
Severity mix
Critical 10High 14Medium 3Low 0
Severity
All severities38Critical10High14Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Vxworks to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-35198
9.8
2%
May 12
An issue was discovered in Wind River VxWorks 7
Affected: 6.9 before 6.9.4.12; 7.0 before 21.03; 6.9.4.12; 6.9.4.12; 6.9.4.12
CVE-2021-29999
9.8
2%
Apr 13
An issue was discovered in Wind River VxWorks through 6.8
Affected: through 6.8
CVE-2021-29998
9.8
2%
Apr 13
An issue was discovered in Wind River VxWorks before 6.5
Affected: before 6.5
CVE-2016-20009
9.8
2%
Mar 11
A DNS client stack-based buffer overflow in ipdnsc_decode_name() affects Wind River VxWorks 6.5 through 7
Affected: 6.5 through 7.0
CVE-2019-12262
9.8
4%
Aug 14
Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component
Affected: 6.6; 6.7; 6.8; 6.9; 7.0
CVE-2019-12261
9.8
9%
Aug 9
Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4)
Affected: 6.5 before 6.9.4.12; 7.0
CVE-2019-12260
9.8
23%
Aug 9
Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4)
Affected: 6.5 before 6.9.4.12; 7.0
CVE-2019-12255
9.8
75%
Aug 9
Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4)
Affected: 6.5 before 6.9.4
CVE-2019-12256
9.8
27%
Aug 9
Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component
Affected: 6.5 before 6.9.4.12
CVE-2010-2965
9.8
58%
Aug 5
The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and other…
Affected: through 6.9.4.12
CVE-2023-38346
8.8
2%
Sep 22
An issue was discovered in Wind River VxWorks 6.9 and 7
Affected: 6.9; 7.0
CVE-2019-12257
8.8
84%
Aug 9
Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component
Affected: 6.5 before 6.9.4
CVE-2019-12263
8.1
3%
Aug 9
Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4)
Affected: 6.5 before 6.9.4.12; 7.0
CVE-2019-9865
8.1
2%
May 29
When RPC is enabled in Wind River VxWorks 6.9 prior to 6.9.1, a specially crafted RPC request can trigger an integer overflow leading to an out-of-bounds memory copy
Affected: 6.9 before 6.9.1; 6.6; 6.7; 6.8
CVE-2015-7599
8.1
6%
Feb 7
Integer overflow in the _authenticate function in svc_auth.c in Wind River VxWorks 5.5 through 6.9.4.1, when the Remote Procedure Call (RPC) protocol is enabled, allows remote…
Affected: through 6.9.4.1; 5.5; 6.4; 6.7; 6.8; 6.9
CVE-2023-51787
7.5
0%
Feb 15
An issue was discovered in Wind River VxWorks 7 22.09 and 23.03
Affected: 7; 7
CVE-2022-38767
7.5
1%
Nov 25
An issue was discovered in Wind River VxWorks 6.9 and 7, that allows a specifically crafted packet sent by a Radius server, may cause Denial of Service during the IP Radius access…
Affected: 6.9 before 6.9.4.12; 6.9.4.12; 6.9.4.12; 6.9.4.12; 6.9.4.12; 6.9.4.12; +2 more
CVE-2022-23937
7.5
1%
Mar 29
In Wind River VxWorks 6.9 and 7, a specific crafted packet may lead to an out-of-bounds read during an IKE initial exchange scenario
Affected: 6.9; 7.0
CVE-2020-11440
7.5
1%
Jul 23
httpRpmFs in WebCLI in Wind River VxWorks 5.5 through 7 SR0640 has no check for an escape from the web root
Affected: 5.5 before 7.0; 7.0; 7.0
CVE-2020-10664
7.5
1%
Apr 27
The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference
Affected: 6.8.3
CVE-2019-12258
7.5
23%
Aug 9
Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component
Affected: 6.5 before 6.9.4.12; 7.0
CVE-2019-12259
7.5
16%
Aug 9
Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component
Affected: 6.5 before 6.9.4.12; 7.0
CVE-2020-28895
7.3
2%
Feb 3
In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc()
Affected: 6.9 before 6.9.4.12; 6.9.4.12; 6.9.4.12
CVE-2019-12264
7.1
8%
Aug 5
Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component
Affected: 6.6; 6.7; 6.8; 6.9.3; 6.9.4; 7.0
CVE-2021-43268
6.5
1%
Nov 24
An issue was discovered in VxWorks 6.9 through 7
Affected: 6.9 through 7.0
CVE-2021-29997
5.3
1%
Apr 13
An issue was discovered in Wind River VxWorks 7 before 21.03
Affected: 7.0 before 21.03
CVE-2019-12265
5.3
60%
Aug 9
Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component
Affected: 6.5 before 6.9.4.12; 7.0
CVE-2015-3963
–
4%
Aug 4
Wind River VxWorks before 5.5.1, 6.5.x through 6.7.x before 6.7.1.1, 6.8.x before 6.8.3, 6.9.x before 6.9.4.4, and 7.x before 7 ipnet_coreip 1.2.2.0, as used on Schneider Electric…
Affected: 6.5 through 6.6; 6.7 before 6.7.1.1; 6.8 before 6.8.3; 6.9 before 6.9.4.4; 6.6.3; 6.6.4; +2 more
CVE-2013-0716
–
2%
Mar 20
The web server in Wind River VxWorks 5.5 through 6.9 allows remote attackers to cause a denial of service (daemon crash) via a crafted URI
Affected: 6.5; 6.6; 6.7; 6.8; 6.9
CVE-2013-0715
–
2%
Mar 20
The WebCLI component in Wind River VxWorks 5.5 through 6.9 allows remote authenticated users to cause a denial of service (CLI session crash) via a crafted command string
Affected: 6.5; 6.6; 6.7; 6.8; 6.9
CVE-2013-0714
–
6%
Mar 20
IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote attackers to execute arbitrary code or cause a denial of service (daemon hang) via a crafted…
Affected: 6.5; 6.6; 6.7; 6.8; 6.9
CVE-2013-0713
–
2%
Mar 20
IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote authenticated users to cause a denial of service (daemon outage) via a crafted pty request
Affected: 6.5; 6.6; 6.7; 6.8; 6.9
CVE-2013-0712
–
3%
Mar 20
IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote authenticated users to cause a denial of service (daemon outage) via a crafted packet
Affected: 6.5; 6.6; 6.7; 6.8; 6.9
CVE-2013-0711
–
3%
Mar 20
IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote attackers to cause a denial of service (daemon outage) via a crafted authentication request
Affected: 6.5; 6.6; 6.7; 6.8; 6.9
CVE-2010-2968
–
1%
Aug 5
The FTP daemon in Wind River VxWorks does not close the TCP connection after a number of failed login attempts, which makes it easier for remote attackers to obtain access via a…
Affected: through 6.8; 5; 5.5; 6; 6.4
CVE-2010-2967
–
2%
Aug 5
The loginDefaultEncrypt algorithm in loginLib in Wind River VxWorks before 6.9 does not properly support a large set of distinct possible passwords, which makes it easier for…
Affected: through 6.8; 5; 5.5; 6; 6.4
CVE-2010-2966
–
2%
Aug 5
The INCLUDE_SECURITY functionality in Wind River VxWorks 6.x, 5.x, and earlier uses the LOGIN_USER_NAME and LOGIN_USER_PASSWORD (aka LOGIN_PASSWORD) parameters to create hardcoded…
Affected: through 6.8; 5; 5.5; 6; 6.4
CVE-2008-2476
–
7%
Oct 3
The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2) OpenBSD 4.2 and 4.3, (3) NetBSD, (4) Force10 FTOS before E7.7.1.1, (5) Juniper JUNOS,…
Affected: through 6.4; 5; 5.5
Showing 38