Lucene search
HistoryOct 03, 2022 - 4:21 p.m.
CVE-2010-2966
cve-2010-2966
wind river
vxworks
hardcoded credentials
telnet
rlogin
ftp
security vulnerability
nvd
6.8 Medium
AI Score
Confidence
Low
7.8 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
0.004 Low
EPSS
Percentile
75.0%
The INCLUDE_SECURITY functionality in Wind River VxWorks 6.x, 5.x, and earlier uses the LOGIN_USER_NAME and LOGIN_USER_PASSWORD (aka LOGIN_PASSWORD) parameters to create hardcoded credentials, which makes it easier for remote attackers to obtain access via a (1) telnet, (2) rlogin, or (3) FTP session.
Affected configurations
Node
windrivervxworksRange≤6.8
ORwindrivervxworksMatch5
ORwindrivervxworksMatch5.5
ORwindrivervxworksMatch6
ORwindrivervxworksMatch6.4
Related
prion
prion
Hardcoded credentials
2010-08-05 13:22:00
nvd
nvd
CVE-2010-2966
2010-08-05 13:22:29
cvelist
cvelist
CVE-2010-2966
2022-10-03 16:21:09
6.8 Medium
AI Score
Confidence
Low
7.8 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
0.004 Low
EPSS
Percentile
75.0%
Related for CVE-2010-2966