CVE-2020-11440

CVE-2020-11440 describes a vulnerability in Wind River VxWorks (WebCLI) where httpRpmFs fails to validate escaping attempts from the web root, potentially exposing sensitive data. The NVD entry notes a network-based attack surface with a CVSS v3.1 base score of 7.5 (High) and a CVSS v2 base score...

CVE-2020-11440

httpRpmFs in WebCLI in Wind River VxWorks 5.5 through 7 SR0640 has no check for an escape from the web root...

Wind River Systems VxWorks IGMP Component Code Issue Vulnerability

Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems, Inc.IGMP is one of the Internet Group Management Protocol components. A code issue vulnerability exists in the IGMP component of Wind River Systems VxWorks. The vulnerability arises from an improper...

Wind River Systems VxWorks tftp client library resource management error vulnerability

Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems, Inc. tftp client library is one of the TFTP Common File Transfer Protocol client libraries. A resource management error vulnerability exists in the tftp client library in Wind River Systems VxWorks...

CVE-2020-10664

The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference...

CVE-2020-10664

The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference...

Null pointer dereference

The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference...

CVE-2020-10664

Affected product/component: Wind River VxWorks 6.8.3 IPNET (IGMP component) with CVE patches created in 2019. Vulnerability: NULL pointer dereference in the IGMP code path. Impact (as stated): Availability impact of the vulnerable component is reported as HIGH (CVSS‑3.1) and PARTIAL (CVSS‑2.0) wi...

CVE-2020-10664

The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference...

CVE-2019-19301

A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE X202-2IRT, SCALANCE X202-2P IRT, SCALANCE X202-2P IRT PRO, SCALANCE X204-2, SCALANCE X204-2FM, SCALANCE X204-2LD, SCALANCE X204-2LD TS, SCALANCE X204-2TS, SCALANCE X204IRT, SCALAN...

Code injection

A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE X202-2IRT, SCALANCE X202-2P IRT, SCALANCE X202-2P IRT PRO, SCALANCE X204-2, SCALANCE X204-2FM, SCALANCE X204-2LD, SCALANCE X204-2LD TS, SCALANCE X204-2TS, SCALANCE X204IRT, SCALAN...

CVE-2019-19301

A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE X202-2IRT, SCALANCE X202-2P IRT, SCALANCE X202-2P IRT PRO, SCALANCE X204-2, SCALANCE X204-2FM, SCALANCE X204-2LD, SCALANCE X204-2LD TS, SCALANCE X204-2TS, SCALANCE X204IRT, SCALAN...

CVE-2019-19301

CVE-2019-19301 affects Siemens SCALANCE and SIMATIC Profinet devices (broad SCALANCE X200/X300 series and related modules) where the VxWorks-based Profinet TCP stack can be forced to perform very expensive calls for every incoming packet, enabling a Denial of Service. Affected components are Prof...

The vulnerability of the IGMPv3 protocol in real-time operating systems like Wind River VxWorks allows a hacker to access confidential information.

The vulnerability of the IGMPv3 protocol in real-time operating systems like Wind River VxWorks involves exposing IGMP information through a special report. Exploiting this vulnerability can allow attackers to access confidential information...

The vulnerability of the RARP protocol in real-time operating systems like Wind River VxWorks allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the RARP protocol in real-time operating systems of Wind River VxWorks is related to errors in processing unwanted reverse ARP responses a logical flaw. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of TCP protocols in real-time operating systems like Wind River VxWorks allows attackers to execute arbitrary code.

The vulnerability of the TCP protocol in real-time operating systems like Wind River VxWorks stems from errors related to the TCP Urgent Pointer during the use of shared resources „Race Conditions“. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending...

The vulnerability of the IGMPv3 protocol in real-time operating systems like Wind River VxWorks allows a attacker to trigger a service failure.

The vulnerability of IGMPv3 protocols in real-time operating systems like Wind River VxWorks is related to an array indexing error. Exploiting this vulnerability could allow a malicious actor to cause service failure by renaming “NULL” as IGMP...

The vulnerability of TCP protocols in real-time operating systems like Wind River VxWorks allows attackers to trigger service interruptions.

The vulnerability of the TCP protocol in real-time operating systems like Wind River VxWorks is related to errors in the creation of TCP options. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the IPv4 protocol in real-time operating systems like Wind River VxWorks allows attackers to compromise the integrity and accessibility of protected information.

The vulnerability of the IPv4 protocol for real-time operating systems developed by Wind River VxWorks is related to insufficient access control mechanisms, such as ipdhcpc and DHCP. Exploiting this vulnerability could allow attackers to compromise the integrity and accessibility of protected...

The vulnerability of TCP protocols in real-time operating systems like Wind River VxWorks allows attackers to execute arbitrary code.

The vulnerability of the TCP protocol in real-time operating systems like Wind River VxWorks is related to errors in the TCP Urgent Pointer. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted TCP packets...