VX
Product
Vxworks
by Windriver · last CVE Feb 15, 2024
38
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 14Medium 3Low 0
Watch

Add Vxworks to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-38346
8.8
2%
Sep 22
An issue was discovered in Wind River VxWorks 6.9 and 7
Affected: 6.9; 7.0
CVE-2019-12257
8.8
84%
Aug 9
Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component
Affected: 6.5 before 6.9.4
CVE-2019-12263
8.1
3%
Aug 9
Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4)
Affected: 6.5 before 6.9.4.12; 7.0
CVE-2019-9865
8.1
2%
May 29
When RPC is enabled in Wind River VxWorks 6.9 prior to 6.9.1, a specially crafted RPC request can trigger an integer overflow leading to an out-of-bounds memory copy
Affected: 6.9 before 6.9.1; 6.6; 6.7; 6.8
CVE-2015-7599
8.1
6%
Feb 7
Integer overflow in the _authenticate function in svc_auth.c in Wind River VxWorks 5.5 through 6.9.4.1, when the Remote Procedure Call (RPC) protocol is enabled, allows remote…
Affected: through 6.9.4.1; 5.5; 6.4; 6.7; 6.8; 6.9
CVE-2023-51787
7.5
0%
Feb 15
An issue was discovered in Wind River VxWorks 7 22.09 and 23.03
Affected: 7; 7
CVE-2022-38767
7.5
1%
Nov 25
An issue was discovered in Wind River VxWorks 6.9 and 7, that allows a specifically crafted packet sent by a Radius server, may cause Denial of Service during the IP Radius access…
Affected: 6.9 before 6.9.4.12; 6.9.4.12; 6.9.4.12; 6.9.4.12; 6.9.4.12; 6.9.4.12; +2 more
CVE-2022-23937
7.5
1%
Mar 29
In Wind River VxWorks 6.9 and 7, a specific crafted packet may lead to an out-of-bounds read during an IKE initial exchange scenario
Affected: 6.9; 7.0
CVE-2020-11440
7.5
1%
Jul 23
httpRpmFs in WebCLI in Wind River VxWorks 5.5 through 7 SR0640 has no check for an escape from the web root
Affected: 5.5 before 7.0; 7.0; 7.0
CVE-2020-10664
7.5
1%
Apr 27
The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference
Affected: 6.8.3
CVE-2019-12258
7.5
23%
Aug 9
Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component
Affected: 6.5 before 6.9.4.12; 7.0
CVE-2019-12259
7.5
16%
Aug 9
Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component
Affected: 6.5 before 6.9.4.12; 7.0
CVE-2020-28895
7.3
2%
Feb 3
In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc()
Affected: 6.9 before 6.9.4.12; 6.9.4.12; 6.9.4.12
CVE-2019-12264
7.1
8%
Aug 5
Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component
Affected: 6.6; 6.7; 6.8; 6.9.3; 6.9.4; 7.0
Showing 14