Lucene search

MitreCVE-2010-2968

HistoryAug 05, 2010 - 1:22 p.m.

CVE-2010-2968

2010-08-0513:22:29

CWE-264

mitre

web.nvd.nist.gov

cve-2010-2968

ftp daemon

wind river vxworks

remote attackers

brute-force attack

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.005

Percentile

76.1%

JSON

The FTP daemon in Wind River VxWorks does not close the TCP connection after a number of failed login attempts, which makes it easier for remote attackers to obtain access via a brute-force attack.

Affected configurations

Nvd

Node

windrivervxworksRange≤6.8

windrivervxworksMatch5

windrivervxworksMatch5.5

windrivervxworksMatch6

windrivervxworksMatch6.4

VendorProductVersionCPE
windrivervxworks*cpe:2.3:o:windriver:vxworks:*:*:*:*:*:*:*:*
windrivervxworks5cpe:2.3:o:windriver:vxworks:5:*:*:*:*:*:*:*
windrivervxworks5.5cpe:2.3:o:windriver:vxworks:5.5:*:*:*:*:*:*:*
windrivervxworks6cpe:2.3:o:windriver:vxworks:6:*:*:*:*:*:*:*
windrivervxworks6.4cpe:2.3:o:windriver:vxworks:6.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
windriver	vxworks	*	cpe:2.3:o:windriver:vxworks::::::::
windriver	vxworks	5	cpe:2.3:o:windriver:vxworks:5:::::::*
windriver	vxworks	5.5	cpe:2.3:o:windriver:vxworks:5.5:::::::*
windriver	vxworks	6	cpe:2.3:o:windriver:vxworks:6:::::::*
windriver	vxworks	6.4	cpe:2.3:o:windriver:vxworks:6.4:::::::*

References

blog.metasploit.com/2010/08/vxworks-vulnerabilities.html

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.005

Percentile

76.1%

JSON

Related for CVE-2010-2968