Windriver VxWorks 7.0 Sr0630

CPE Details

Windriver VxWorks 7.0 Sr0630
windriver
vxworks
7.0
2020-05-27
18h16 +00:00
2020-05-27
18h16 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:o:windriver:vxworks:7.0:sr0630:*:*:*:*:*:*

Informations

Vendor

windriver

Product

vxworks

Version

7.0

Update

sr0630

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2022-38767 2022-11-24 23h00 +00:00 An issue was discovered in Wind River VxWorks 6.9 and 7, that allows a specifically crafted packet sent by a Radius server, may cause Denial of Service during the IP Radius access procedure.
7.5
Haute
CVE-2022-23937 2022-03-28 23h21 +00:00 In Wind River VxWorks 6.9 and 7, a specific crafted packet may lead to an out-of-bounds read during an IKE initial exchange scenario.
7.5
Haute
CVE-2021-43268 2021-11-24 15h15 +00:00 An issue was discovered in VxWorks 6.9 through 7. In the IKE component, a specifically crafted packet may lead to reading beyond the end of a buffer, or a double free.
6.5
Moyen
CVE-2020-35198 2021-05-12 08h55 +00:00 An issue was discovered in Wind River VxWorks 7. The memory allocator has a possible integer overflow in calculating a memory block's size to be allocated by calloc(). As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption.
9.8
Critique
CVE-2021-29997 2021-04-13 14h34 +00:00 An issue was discovered in Wind River VxWorks 7 before 21.03. A specially crafted packet may lead to buffer over-read on IKE.
5.3
Moyen
CVE-2016-20009 2021-03-11 20h39 +00:00 A DNS client stack-based buffer overflow in ipdnsc_decode_name() affects Wind River VxWorks 6.5 through 7. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
9.8
Critique
CVE-2020-11440 2020-07-23 11h59 +00:00 httpRpmFs in WebCLI in Wind River VxWorks 5.5 through 7 SR0640 has no check for an escape from the web root.
7.5
Haute
CVE-2019-12262 2019-08-14 17h18 +00:00 Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component. IPNET security vulnerability: Handling of unsolicited Reverse ARP replies (Logical Flaw).
9.8
Critique
CVE-2019-12264 2019-08-05 15h34 +00:00 Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component.
7.1
Haute
CVE-2015-3963 2015-08-03 23h00 +00:00 Wind River VxWorks before 5.5.1, 6.5.x through 6.7.x before 6.7.1.1, 6.8.x before 6.8.3, 6.9.x before 6.9.4.4, and 7.x before 7 ipnet_coreip 1.2.2.0, as used on Schneider Electric SAGE RTU devices before J2 and other devices, does not properly generate TCP initial sequence number (ISN) values, which makes it easier for remote attackers to spoof TCP sessions by predicting an ISN value.
5.8