Integer overflow

When RPC is enabled in Wind River VxWorks 6.9 prior to 6.9.1, a specially crafted RPC request can trigger an integer overflow leading to an out-of-bounds memory copy. It may allow remote attackers to cause a denial of service crash or possibly execute arbitrary code...

CVE-2019-9865

When RPC is enabled in Wind River VxWorks 6.9 prior to 6.9.1, a specially crafted RPC request can trigger an integer overflow leading to an out-of-bounds memory copy. It may allow remote attackers to cause a denial of service crash or possibly execute arbitrary code...

CVE-2019-9865

The CVE-2019-9865 advisory covers Wind River VxWorks 6.9 prior to 6.9.1 where an RPC request can trigger an integer overflow causing an out-of-bounds memory copy. This may allow a remote attacker to cause a denial of service or possibly execute arbitrary code. Connected sources confirm affected p...

PT-2019-19900

Name of the Vulnerable Software and Affected Versions Wind River VxWorks versions prior to 6.9.1 Description The issue allows remote attackers to cause a denial of service or possibly execute arbitrary code due to an integer overflow triggered by a specially crafted RPC request when RPC is enable...

CVE-2019-9865: Integer Overflow or Wraparound

When RPC is enabled in Wind River VxWorks 6.9 prior to 6.9.1, a specially crafted RPC request can trigger an integer overflow leading to an out-of-bounds memory copy. It may allow remote attackers to cause a denial of service crash or possibly execute arbitrary code...

Wind River VxWorks Vulnerabilities

Overview A security researcher has identified two vulnerabilities affecting the Wind River Systems’ VxWorks platform. The vulnerabilities are a debug service enabled by default VU362332 and a weak hashing algorithm used in authentication VU840249. ICS-CERT has been coordinating with CERT/CC in...

Authentication flaw

Huawei UAP2105 before V300R012C00SPC160BootRom does not require authentication to the serial port or the VxWorks shell...

CVE-2015-6592

Huawei UAP2105 before V300R012C00SPC160BootRom does not require authentication to the serial port or the VxWorks shell...

CVE-2015-6592

Huawei UAP2105 before V300R012C00SPC160BootRom does not require authentication to the serial port or the VxWorks shell...

CVE-2015-6592

CVE-2015-6592 affects Huawei UAP2105 prior to V300R012C00SPC160 (BootROM). The issue is unauthenticated access to the serial port and the VxWorks shell, allowing an attacker to run VxWorks debugging commands and view/modify memory and files, leading to information disclosure and system anomalies....

CVE-2015-6592: Undefined Security Weakness

Huawei UAP2105 before V300R012C00SPC160BootRom does not require authentication to the serial port or the VxWorks shell...

PT-2017-7040

Name of the Vulnerable Software and Affected Versions Huawei UAP2105 version before V300R012C00SPC160BootRom Description The issue concerns a lack of authentication requirement for access to the serial port or the VxWorks shell. Recommendations For versions prior to V300R012C00SPC160BootRom, upda...

Integer overflow

Integer overflow in the authenticate function in svcauth.c in Wind River VxWorks 5.5 through 6.9.4.1, when the Remote Procedure Call RPC protocol is enabled, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a username and password...

CVE-2015-7599

Integer overflow in the authenticate function in svcauth.c in Wind River VxWorks 5.5 through 6.9.4.1, when the Remote Procedure Call RPC protocol is enabled, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a username and password...

CVE-2015-7599

Integer overflow in the authenticate function in svcauth.c in Wind River VxWorks 5.5 through 6.9.4.1, when the Remote Procedure Call RPC protocol is enabled, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a username and password...

CVE-2015-7599

Wind River VxWorks CVE-2015-7599: Integer overflow in _authenticate (svc_auth.c) when RPC is enabled, enabling remote DoS and potential code execution. Affected versions: VxWorks 5.5–6.9.4.1. Public references in the connected docs show an RPC DoS exploit module (vxworks_rpc_dos) targeting VxWork...

CVE-2015-7599: Integer Overflow or Wraparound

Integer overflow in the authenticate function in svcauth.c in Wind River VxWorks 5.5 through 6.9.4.1, when the Remote Procedure Call RPC protocol is enabled, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a username and password...

PT-2017-7251

Name of the Vulnerable Software and Affected Versions Wind River VxWorks versions 5.5 through 6.9.4.1 Description The issue is related to an integer overflow in the authenticate function, which can be triggered when the Remote Procedure Call RPC protocol is enabled. This can allow remote attacker...

Stack overflow vulnerability in Wind River VxWorks

Summary: WindRiver is releasing mitigations for a privilege escalation issue. This issue affects versions of Wind River VxWorks products. The issue being mitigated is a method to execute arbitrary code without user interactions. Description: Anonymous remote attackers can cause a stack overflow,...

VxWorks Fuzzing: VxWorks industrial real-time operating system vulnerability mining debugging with the use of secret-vulnerability warning-the black bar safety net

VxWorks is the world's most widely used method in the embedded system deployed in real timeoperating system, is composed of the United States WindRiver company referred to Wind River Corporation, i.e., the WRS company in 1 9 8 3 years in design and development. Their market ranges across all safe...