554 matches found
The vulnerability of the DHCP protocol for real-time operating systems like Wind River VxWorks allows a perpetrator to execute arbitrary code.
The vulnerability of the DHCP protocol for real-time operating systems like Wind River VxWorks is related to a potential overflow during the parsing of DHCP/DACK messages within the ipdhcpc process. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially crafted...
The vulnerability of TCP protocols in real-time operating systems like Wind River VxWorks allows attackers to execute arbitrary code.
The vulnerability of the TCP protocol in real-time operating systems like Wind River VxWorks stems from errors in the TCP Urgent Pointer during the “connect” operation when connecting to a remote host. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially...
The vulnerability of the IPv4 protocol for real-time operating systems like Wind River VxWorks allows attackers to execute arbitrary code.
The vulnerability of the IPv4 protocol for real-time operating systems like Wind River VxWorks stems from buffer overflows in the stack during the parsing of IP packets. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted IPv4 packets...
The vulnerability of TCP protocols in real-time operating systems like Wind River VxWorks allows attackers to trigger service interruptions.
The vulnerability of the TCP protocol in real-time operating systems like Wind River VxWorks stems from the loss of the integer value “TCP Urgent Pointer=0”. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted TCP packets...
Multiple vulnerabilities in TCP/IP function on Mitsubishi Electric MELSEC C Controller Module and MELIPC Series MI5000
Overview MELSEC C Controller Module and MELIPC Series MI5000 provided by Mitsubishi Electric Corporation have multiple vulnerabilities due to the vulnerabilities called "URGENT/11" in TCP/IP function IPnet of VxWorks, a real-time OS distributed by Wind River. Q24DHCCPU-V and Q24DHCCPU-VG Buffer...
Denial of Service Vulnerability in PRS-7741 Measurement and Control Unit of Changyuan Shamrui
Changyuan Shamrui PRS-7741 measurement and control device is a measurement and control equipment with telemetry, telecommunication, remote control, remote adjustment and other remote functions using Vxworks operating system. A denial of service vulnerability exists in the PRS-7741 measurement and...
Windriver Vxworks Improper Restriction of Operations within the Bounds of a Memory Buffer
Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component issue 4 of 4. There is an IPNET security vulnerability: TCP Urgent Pointer state confusion due to race condition. File data ot500063.nasl...
Windriver Vxworks NULL Pointer Dereference
Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. There is an IPNET security vulnerability: DoS via NULL dereference in IGMP parsing. File data ot500058.nasl...
Windriver Vxworks Improper Restriction of Operations within the Bounds of a Memory Buffer
Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component issue 2 of 4. This is an IPNET security vulnerability: TCP Urgent Pointer state confusion caused by a malformed TCP AO option. File data ot500292.nasl...
Windriver Vxworks Improper Restriction of Operations within the Bounds of a Memory Buffer
Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. There is an IPNET security vulnerability: Heap overflow in DHCP Offer/ACK parsing inside ipdhcpc. File data ot500061.nasl...
Windriver Vxworks Session Fixation
Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. This is a IPNET security vulnerability: DoS of TCP connection via malformed TCP options. File data ot500067.nasl...
Windriver Vxworks Improper Restriction of Operations within the Bounds of a Memory Buffer
Wind River VxWorks has a Buffer Overflow in the TCP component issue 1 of 4. This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow. File data ot500065.nasl...
Windriver Vxworks Improper Restriction of Operations within the Bounds of a Memory Buffer
Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component issue 3 of 4. This is an IPNET security vulnerability: TCP Urgent Pointer state confusion during connect to a remote host. File data ot500203.nasl...
Windriver Vxworks Improper Restriction of Operations within the Bounds of a Memory Buffer
Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET security vulnerability: Stack overflow in the parsing of IPv4 packets’ IP options. File data ot500279.nasl...
Windriver Vxworks Unspecified Vulnerability
The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and other products, allows remote attackers to read or modify arbitrary memory locations, perform function calls, or manage tasks via...
Windriver Vxworks Unspecified Vulnerability
Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There is an IPNET security vulnerability: IGMP Information leak via IGMPv3 specific membership report. File data ot500056.nasl...
Interpeak IPnet TCP/IP Stack (Update D)
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit/public exploits are available Vendors: ENEA, Green Hills Software, ITRON, IP Infusion, Wind River Equipment: OSE by ENEA, INTEGRITY RTOS by Green Hills Software, ITRON, ZebOS by IP Infusion, and VxWorks by...
Pwning a Siemens Scalance ICS switch through ARM reversing
We’ve been working in industrial control systems security for a long time. Several of the team here used to work in OT control rooms or support SCADA environments. Whilst pen testing a ship control system, we noticed a heavy reliance on Siemens Scalance industrial ethernet switches, so bought a...
