WI
Vendor
Windriver
42
CVEs
0
On KEV
0
New 30D
Products
VX9.8
Vxworks
Windriver
38 CVEs0 on KEV0 new
BS4.0
Bsdos
Windriver
2 CVEs0 on KEV0 new
LI7.4
Linux
Windriver
1 CVEs0 on KEV0 new
PS–
Platform SA
Windriver
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-51787 | VX Vxworks Windriver | 7.5 | Feb 15 | An issue was discovered in Wind River VxWorks 7 22.09 and 23.03 |
| CVE-2023-38346 | VX Vxworks Windriver | 8.8 | Sep 22 | An issue was discovered in Wind River VxWorks 6.9 and 7 |
| CVE-2022-38767 | VX Vxworks Windriver | 7.5 | Nov 25 | An issue was discovered in Wind River VxWorks 6.9 and 7, that allows a specifically crafted packet sent by a Radius server, may cause Denial of Service during the IP Radius access… |
| CVE-2022-23937 | VX Vxworks Windriver | 7.5 | Mar 29 | In Wind River VxWorks 6.9 and 7, a specific crafted packet may lead to an out-of-bounds read during an IKE initial exchange scenario |
| CVE-2021-43268 | VX Vxworks Windriver | 6.5 | Nov 24 | An issue was discovered in VxWorks 6.9 through 7 |
| CVE-2020-35198 | VX Vxworks Windriver | 9.8 | May 12 | An issue was discovered in Wind River VxWorks 7 |
| CVE-2021-29999 | VX Vxworks Windriver | 9.8 | Apr 13 | An issue was discovered in Wind River VxWorks through 6.8 |
| CVE-2021-29998 | VX Vxworks Windriver | 9.8 | Apr 13 | An issue was discovered in Wind River VxWorks before 6.5 |
| CVE-2021-29997 | VX Vxworks Windriver | 5.3 | Apr 13 | An issue was discovered in Wind River VxWorks 7 before 21.03 |
| CVE-2021-3450 | LI Linux Windriver | 7.4 | Mar 25 | CA certificate check bypass with X509_V_FLAG_X509_STRICT |
| CVE-2016-20009 | VX Vxworks Windriver | 9.8 | Mar 11 | A DNS client stack-based buffer overflow in ipdnsc_decode_name() affects Wind River VxWorks 6.5 through 7 |
| CVE-2020-28895 | VX Vxworks Windriver | 7.3 | Feb 3 | In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc() |
| CVE-2020-11440 | VX Vxworks Windriver | 7.5 | Jul 23 | httpRpmFs in WebCLI in Wind River VxWorks 5.5 through 7 SR0640 has no check for an escape from the web root |
| CVE-2020-10664 | VX Vxworks Windriver | 7.5 | Apr 27 | The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference |
| CVE-2019-12262 | VX Vxworks Windriver | 9.8 | Aug 14 | Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component |
| CVE-2019-12261 | VX Vxworks Windriver | 9.8 | Aug 9 | Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4) |
| CVE-2019-12260 | VX Vxworks Windriver | 9.8 | Aug 9 | Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4) |
| CVE-2019-12258 | VX Vxworks Windriver | 7.5 | Aug 9 | Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component |
| CVE-2019-12255 | VX Vxworks Windriver | 9.8 | Aug 9 | Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4) |
| CVE-2019-12265 | VX Vxworks Windriver | 5.3 | Aug 9 | Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component |
| CVE-2019-12263 | VX Vxworks Windriver | 8.1 | Aug 9 | Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4) |
| CVE-2019-12259 | VX Vxworks Windriver | 7.5 | Aug 9 | Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component |
| CVE-2019-12257 | VX Vxworks Windriver | 8.8 | Aug 9 | Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component |
| CVE-2019-12256 | VX Vxworks Windriver | 9.8 | Aug 9 | Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component |
| CVE-2019-12264 | VX Vxworks Windriver | 7.1 | Aug 5 | Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component |
| CVE-2019-9865 | VX Vxworks Windriver | 8.1 | May 29 | When RPC is enabled in Wind River VxWorks 6.9 prior to 6.9.1, a specially crafted RPC request can trigger an integer overflow leading to an out-of-bounds memory copy |
| CVE-2015-7599 | VX Vxworks Windriver | 8.1 | Feb 7 | Integer overflow in the _authenticate function in svc_auth.c in Wind River VxWorks 5.5 through 6.9.4.1, when the Remote Procedure Call (RPC) protocol is enabled, allows remote… |
| CVE-2015-3963 | VX Vxworks Windriver | – | Aug 4 | Wind River VxWorks before 5.5.1, 6.5.x through 6.7.x before 6.7.1.1, 6.8.x before 6.8.3, 6.9.x before 6.9.4.4, and 7.x before 7 ipnet_coreip 1.2.2.0, as used on Schneider Electric… |
| CVE-2013-0716 | VX Vxworks Windriver | – | Mar 20 | The web server in Wind River VxWorks 5.5 through 6.9 allows remote attackers to cause a denial of service (daemon crash) via a crafted URI |
| CVE-2013-0715 | VX Vxworks Windriver | – | Mar 20 | The WebCLI component in Wind River VxWorks 5.5 through 6.9 allows remote authenticated users to cause a denial of service (CLI session crash) via a crafted command string |
| CVE-2013-0714 | VX Vxworks Windriver | – | Mar 20 | IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote attackers to execute arbitrary code or cause a denial of service (daemon hang) via a crafted… |
| CVE-2013-0713 | VX Vxworks Windriver | – | Mar 20 | IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote authenticated users to cause a denial of service (daemon outage) via a crafted pty request |
| CVE-2013-0712 | VX Vxworks Windriver | – | Mar 20 | IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote authenticated users to cause a denial of service (daemon outage) via a crafted packet |
| CVE-2013-0711 | VX Vxworks Windriver | – | Mar 20 | IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote attackers to cause a denial of service (daemon outage) via a crafted authentication request |
| CVE-2010-2968 | VX Vxworks Windriver | – | Aug 5 | The FTP daemon in Wind River VxWorks does not close the TCP connection after a number of failed login attempts, which makes it easier for remote attackers to obtain access via a… |
| CVE-2010-2967 | VX Vxworks Windriver | – | Aug 5 | The loginDefaultEncrypt algorithm in loginLib in Wind River VxWorks before 6.9 does not properly support a large set of distinct possible passwords, which makes it easier for… |
| CVE-2010-2966 | VX Vxworks Windriver | – | Aug 5 | The INCLUDE_SECURITY functionality in Wind River VxWorks 6.x, 5.x, and earlier uses the LOGIN_USER_NAME and LOGIN_USER_PASSWORD (aka LOGIN_PASSWORD) parameters to create hardcoded… |
| CVE-2010-2965 | VX Vxworks Windriver | 9.8 | Aug 5 | The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and other… |
| CVE-2008-2476 | VX Vxworks Windriver | – | Oct 3 | The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2) OpenBSD 4.2 and 4.3, (3) NetBSD, (4) Force10 FTOS before E7.7.1.1, (5) Juniper JUNOS,… |
| CVE-2002-1337 | BS Bsdos Windriver | – | Mar 7 | Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments… |
| CVE-1999-0524 | BS Bsdos Windriver | 4.0 | Aug 1 | ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts |