554 matches found
VxWorks WDB Agent 远程内存读取漏洞
VxWorks安全初探 404@KnownSec --- 0x00 前言 --- 关于VxWorks，这里引用44CON议题《攻击 VxWorks：从石器时代到星际》探究 一文章中的介绍： VxWorks 是世界上使用最广泛的一种在嵌入式系统中部署的实时操作系统，是由美国WindRiver公司（简称风河公司，即WRS 公司）于1983年设计开发的。其市场范围跨越所有的安全关键领域，仅举几例，包括火星好奇心流浪者、波音787梦幻客机、网络路由器。这些应用程序的安全高危性质使得VxWorks的安全被高度关注。 VxWorks操作系统是由美国Wind...
Multiple Routers (IRC Request) Disconnect Denial of Service Vulnerability
No description provided by source. It appears that various routers are prone to an IRC-only DoS attack. Particularly Netgear and Linksys routers have been shown vulnerable. If a client behind one of the vulnerable routers connects to an IRC server on port 6667 and only 6667, does not DoS with oth...
Schneider Electric PLC ETY Series Ethernet Controller - Denial of Service
No description provided by source. Telnet server of Schenider Electric ETY Series Controllers have a security problem. We noticed that while we are connected to the PLC through telnet, if we call telnet instance inside VxWorks again it can cause the device to crash. The telnet instance name is...
Tru64 Malformed TCP Packet Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4011/info It has been reported that Tru64 systems may be prone to a denial of service condition when handling malformed TCP packets. Specifically, when processing a malformed TCP packet with both the SYN and FIN flags set...
Schneider Electric SCADAPack VxWorks Debugger漏洞
施耐德电气集团对能源和基础设施、工业、数据中心和网络、楼宇以及住宅等领域提供产品和服务。 Schneider Electric SCADAPack 330, 334, 350, 357产品由于启用了VxWorks调试代理存在安全漏洞，远程攻击者通过发送特制的请求到UDP端口17185，利用此漏洞可控制受影响设备。 0 Schneider Electric SCADAPack 35x Schneider Electric SCADAPack 33x 厂商补丁： Schneider Electric ------------------...
VxWorks 5.5 through 6.9 Multiple Vulnerabilities
According to its self-reported version, the remote VxWorks device is version 5.5 through 6.9. It therefore is potentially affected by the following vulnerabilities : - An attacker can cause SSH access to be unavailable until the next reboot with a specially crafted requests. CVE-2013-0711 /...
Schneider Electric PLC ETY Series Ethernet Controller - Denial of Service
Schneider Electric PLC ETY Series Ethernet Controller - Denial of Service Telnet server of Schenider Electric ETY Series Controllers have a security problem. We noticed that while we are connected to the PLC through telnet, if we call telnet instance inside VxWorks again it can cause the device t...
VxWorks Detection
Binary data 6876.prm...
VxWorks R5_0_31 Data Disclosure
Known Affected Versions: R5031 Created March 1st, 2007 Date Discovered: November 13, 2012 Obviously not anything new to get sensitive data out via the VxWorks remote debugger, but this seemed to warrant specific attention since it did allow for the disclosure of call logs and full access to all...
Aastra IP Telephone hardcoded telnet admin password
Aastra IP Telephone hardcoded telnet admin password --------------------------------------------------- Affected products ================= Aastra 6753i IP Telephone Firmware Version 3.2.2.56 Firmware Release Code SIP Boot Version 2.5.2.1010 Background ========== "The 6753i from Aastra offers...
CVE-2013-0713
IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote authenticated users to cause a denial of service daemon outage via a crafted pty request...
CVE-2013-0714
IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote attackers to execute arbitrary code or cause a denial of service daemon hang via a crafted public-key authentication request...
CVE-2013-0715
The WebCLI component in Wind River VxWorks 5.5 through 6.9 allows remote authenticated users to cause a denial of service CLI session crash via a crafted command string...
CVE-2013-0711
IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote attackers to cause a denial of service daemon outage via a crafted authentication request...
CVE-2013-0716
The web server in Wind River VxWorks 5.5 through 6.9 allows remote attackers to cause a denial of service daemon crash via a crafted URI...
CVE-2013-0712
IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote authenticated users to cause a denial of service daemon outage via a crafted packet...
Command injection
The WebCLI component in Wind River VxWorks 5.5 through 6.9 allows remote authenticated users to cause a denial of service CLI session crash via a crafted command string...
Cross site request forgery (csrf)
IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote attackers to cause a denial of service daemon outage via a crafted authentication request...
Cross site request forgery (csrf)
IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote attackers to execute arbitrary code or cause a denial of service daemon hang via a crafted public-key authentication request...