CVE-2018-17185

CVE-2018-17185 is rejected/not used; not an active vulnerability entry.

CVE-2017-17185

CVE-2017-17185 affects Huawei DP300, RP200, V600R006C00 and related TE/V series devices; an authenticated, remote attacker could send malformed SOAP packets due to insufficient input validation, causing an out-of-bounds read and potential process reset. Huawei’s security advisory (and CNVD/NVD en...

CVE-2013-0659

The debugging feature on the Siemens CP 1604 and CP 1616 interface cards with firmware before 2.5.2 allows remote attackers to execute arbitrary code via a crafted packet to UDP port 17185...

Design/Logic Flaw

The debugging feature on the Siemens CP 1604 and CP 1616 interface cards with firmware before 2.5.2 allows remote attackers to execute arbitrary code via a crafted packet to UDP port 17185...

CVE-2013-0659

The debugging feature on the Siemens CP 1604 and CP 1616 interface cards with firmware before 2.5.2 allows remote attackers to execute arbitrary code via a crafted packet to UDP port 17185...

CVE-2013-0659

Affected software/hardware: Siemens CP 1604 and CP 1616 interface cards (CP 1604/1604 Microbox package and onboard SIMANTIC IPCs) with firmware prior to 2.5.2. Vulnerability details: Debugging interface is enabled by default; sending a crafted UDP packet to port 17185 can allow remote code execut...

CVE-2010-2965

The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and other products, allows remote attackers to read or modify arbitrary memory locations, perform function calls, or manage tasks via...

Design/Logic Flaw

The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and other products, allows remote attackers to read or modify arbitrary memory locations, perform function calls, or manage tasks via...

CVE-2010-2965

The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and other products, allows remote attackers to read or modify arbitrary memory locations, perform function calls, or manage tasks via...

CVE-2010-2965

CVE-2010-2965 affects Wind River VxWorks targets (6.x, 5.x and earlier), notably Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1. The WDB target agent debug service exposes a UDP 17185 port that can be used by remote attackers to read or modify arbitrary memory, perform funct...

CVE-2010-2965

The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and other products, allows remote attackers to read or modify arbitrary memory locations, perform function calls, or manage tasks via...

CVE-2010-2965

The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and other products, allows remote attackers to read or modify arbitrary memory locations, perform function calls, or manage tasks via...

PT-2010-4439

Name of the Vulnerable Software and Affected Versions Wind River VxWorks versions 6.x, 5.x, and earlier Description The issue allows remote attackers to read or modify arbitrary memory locations, perform function calls, or manage tasks via requests to UDP port 17185. This is related to a previous...

CVE-2006-0374

Advantage Century Telecommunication ACT P202S IP Phone 1.01.21 running firmware 1.1.21 has multiple undocumented ports available, which 1 might allow remote attackers to obtain sensitive information, such as memory contents and internal operating-system data, by directly accessing the VxWorks WDB...

Senao SI-7800H wireless VoIP phone multiple vulnerabilities

VxWorks debugger TCP/17185 access...

CVE-2005-3804

Cisco IP Phone VoIP 7920 1.08 listens to UDP port 17185 to support a VxWorks debugger, which allows remote attackers to obtain sensitive information and cause a denial of service...

CVE-2005-3804

The CVE-2005-3804 family is tied to Cisco IP Phone 7920 (VoIP) 1.0(8), where the device listens on UDP port 17185 to support a VxWorks debugger. This exposes a WDB debug service that remote attackers can use to obtain sensitive information and cause a denial of service. Related entries (Wind Rive...

PT-2005-4555

Name of the Vulnerable Software and Affected Versions Cisco IP Phone VoIP 7920 version 1.08 Description The issue allows remote attackers to obtain sensitive information and cause a denial of service. This is due to the phone listening to UDP port 17185 for a VxWorks debugger. Recommendations For...

Senao SI-680H wirieless Wi-Fi VoIP phones unauthorized access

VxWorks debugger is available with UDP/17185...

[Full-disclosure] Senao SI-680H VoIP Wifi phone undocumented open port

I disclosed today the following vulnerability at the 32nd CSI conference in Washington, D.C. https://www.cmpevents.com/CSI32/a.asp?option=G&V=3&id=406438 Thanks, Shawn Merdinger =============================================================== VENDOR: Senao VENDOR NOTIFIED: 28 June, 2005 VENDOR...