VX
Product
Vxworks
38
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 14Medium 3Low 0
Watch
Add Vxworks to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-38346 | 8.8 | Sep 22 | An issue was discovered in Wind River VxWorks 6.9 and 7 Affected: 6.9; 7.0 |
| CVE-2019-12257 | 8.8 | Aug 9 | Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component Affected: 6.5 before 6.9.4 |
| CVE-2019-12263 | 8.1 | Aug 9 | Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4) Affected: 6.5 before 6.9.4.12; 7.0 |
| CVE-2019-9865 | 8.1 | May 29 | When RPC is enabled in Wind River VxWorks 6.9 prior to 6.9.1, a specially crafted RPC request can trigger an integer overflow leading to an out-of-bounds memory copy Affected: 6.9 before 6.9.1; 6.6; 6.7; 6.8 |
| CVE-2015-7599 | 8.1 | Feb 7 | Integer overflow in the _authenticate function in svc_auth.c in Wind River VxWorks 5.5 through 6.9.4.1, when the Remote Procedure Call (RPC) protocol is enabled, allows remote… Affected: through 6.9.4.1; 5.5; 6.4; 6.7; 6.8; 6.9 |
| CVE-2023-51787 | 7.5 | Feb 15 | An issue was discovered in Wind River VxWorks 7 22.09 and 23.03 Affected: 7; 7 |
| CVE-2022-38767 | 7.5 | Nov 25 | An issue was discovered in Wind River VxWorks 6.9 and 7, that allows a specifically crafted packet sent by a Radius server, may cause Denial of Service during the IP Radius access… Affected: 6.9 before 6.9.4.12; 6.9.4.12; 6.9.4.12; 6.9.4.12; 6.9.4.12; 6.9.4.12; +2 more |
| CVE-2022-23937 | 7.5 | Mar 29 | In Wind River VxWorks 6.9 and 7, a specific crafted packet may lead to an out-of-bounds read during an IKE initial exchange scenario Affected: 6.9; 7.0 |
| CVE-2020-11440 | 7.5 | Jul 23 | httpRpmFs in WebCLI in Wind River VxWorks 5.5 through 7 SR0640 has no check for an escape from the web root Affected: 5.5 before 7.0; 7.0; 7.0 |
| CVE-2020-10664 | 7.5 | Apr 27 | The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference Affected: 6.8.3 |
| CVE-2019-12258 | 7.5 | Aug 9 | Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component Affected: 6.5 before 6.9.4.12; 7.0 |
| CVE-2019-12259 | 7.5 | Aug 9 | Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component Affected: 6.5 before 6.9.4.12; 7.0 |
| CVE-2020-28895 | 7.3 | Feb 3 | In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc() Affected: 6.9 before 6.9.4.12; 6.9.4.12; 6.9.4.12 |
| CVE-2019-12264 | 7.1 | Aug 5 | Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component Affected: 6.6; 6.7; 6.8; 6.9.3; 6.9.4; 7.0 |
Showing 14
