Lucene search
HistoryOct 03, 2022 - 4:21 p.m.
CVE-2010-2967
cve-2010-2967
vxworks
logindefaultencrypt
security vulnerability
remote access
telnet
rlogin
ftp
6.7 Medium
AI Score
Confidence
Low
7.8 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
0.002 Low
EPSS
Percentile
58.9%
The loginDefaultEncrypt algorithm in loginLib in Wind River VxWorks before 6.9 does not properly support a large set of distinct possible passwords, which makes it easier for remote attackers to obtain access via a (1) telnet, (2) rlogin, or (3) FTP session.
Affected configurations
Node
windrivervxworksRange≤6.8
ORwindrivervxworksMatch5
ORwindrivervxworksMatch5.5
ORwindrivervxworksMatch6
ORwindrivervxworksMatch6.4
Related
cert
cert
cvelist
cvelist
CVE-2010-2967
2022-10-03 16:21:07
prion
prion
Session fixation
2010-08-05 13:22:00
nvd
nvd
CVE-2010-2967
2010-08-05 13:22:29
6.7 Medium
AI Score
Confidence
Low
7.8 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
0.002 Low
EPSS
Percentile
58.9%
Related for CVE-2010-2967