CVE-2010-2965

2010-08-0513:22:29

CWE-863

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0.866

Percentile

98.6%

JSON

The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and other products, allows remote attackers to read or modify arbitrary memory locations, perform function calls, or manage tasks via requests to UDP port 17185, a related issue to CVE-2005-3804.

Affected configurations

Nvd

Node

rockwellautomation1756-enbt\/a_firmwareMatch3.2.6

rockwellautomation1756-enbt\/a_firmwareMatch3.6.1

windrivervxworksRange≤6.9.4.12

AND

rockwellautomation1756-enbt\/aMatch-

VendorProductVersionCPE
rockwellautomation1756-enbt\/a_firmware3.2.6cpe:2.3:o:rockwellautomation:1756-enbt\/a_firmware:3.2.6:*:*:*:*:*:*:*
rockwellautomation1756-enbt\/a_firmware3.6.1cpe:2.3:o:rockwellautomation:1756-enbt\/a_firmware:3.6.1:*:*:*:*:*:*:*
windrivervxworks*cpe:2.3:o:windriver:vxworks:*:*:*:*:*:*:*:*
rockwellautomation1756-enbt\/a-cpe:2.3:h:rockwellautomation:1756-enbt\/a:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
rockwellautomation	1756-enbt\/a_firmware	3.2.6	cpe:2.3:o:rockwellautomation:1756-enbt\/a_firmware:3.2.6:::::::*
rockwellautomation	1756-enbt\/a_firmware	3.6.1	cpe:2.3:o:rockwellautomation:1756-enbt\/a_firmware:3.6.1:::::::*
windriver	vxworks	*	cpe:2.3:o:windriver:vxworks::::::::
rockwellautomation	1756-enbt\/a	-	cpe:2.3:h:rockwellautomation:1756-enbt\/a:-:::::::*