CVE-2022-38767

An issue was discovered in Wind River VxWorks 6.9 and 7, that allows a specifically crafted packet sent by a Radius server, may cause Denial of Service during the IP Radius access procedure...

southriverhigh.org Cross Site Scripting vulnerability OBB-2940738

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SQL Injection Vulnerability in the Integrated Management System of River Management System of Sichuang Technology Co.

Siltronic Ltd. is an information service provider for disaster reduction and profitability in China. A SQL injection vulnerability exists in the integrated river management system of Sicron Technology Limited, which can be exploited by attackers to obtain sensitive information from the database...

charlesriverboat.com Cross Site Scripting vulnerability OBB-2779177

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability of real-time operating system DHCP clients of Wind River VxWorks and industrial switches from Siemens (SCALANCE and Ruggedcom) allows a perpetrator to execute arbitrary code.

The vulnerability of real-time operating systems under DHCP clients in Wind River VxWorks, industrial switches from Siemens SCALANCE and Ruggedcom, lies in the fact that the operation data is written outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execut...

rougeriverfarms.com Cross Site Scripting vulnerability OBB-2618436

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Mitsubishi Electric MELSEC-Q Series C Controller Module

1. EXECUTIVE SUMMARY CVSS v3 9.0 ATTENTION: Exploitable remotely Vendor: Mitsubishi Electric Equipment: MELSEC-Q Series C Controller Module Vulnerability: Heap-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could cause a denial-of-service condition or allow...

Wind River VxWorks Buffer Overflow Vulnerability (CNVD-2022-55065)

Wind River VxWorks is an operating system from Wind River, Inc. an industry-leading real-time operating system for building embedded devices and systems.Wind River VxWorks suffers from a buffer overflow vulnerability that stems from a networked system or product that does not properly validate da...

CVE-2022-23937

In Wind River VxWorks 6.9 and 7, a specific crafted packet may lead to an out-of-bounds read during an IKE initial exchange scenario...

CVE-2022-23937

In Wind River VxWorks 6.9 and 7, a specific crafted packet may lead to an out-of-bounds read during an IKE initial exchange scenario...

CVE-2022-23937

In Wind River VxWorks 6.9 and 7, a specific crafted packet may lead to an out-of-bounds read during an IKE initial exchange scenario...

CVE-2022-23937

In Wind River VxWorks 6.9 and 7, a specific crafted packet may lead to an out-of-bounds read during an IKE initial exchange scenario...

PT-2022-6693 · Wind River · Vxworks

Name of the Vulnerable Software and Affected Versions: Wind River VxWorks versions 6.9 through 7 Description: The issue is related to an out-of-bounds read during an IKE initial exchange scenario, which can be triggered by a specifically crafted packet. This may allow a remote attacker to cause a...

Wind River VxWorks 缓冲区错误漏洞

Wind River VxWorks is an operating system from Wind River, Inc. an industry-leading real-time operating system for building embedded devices and systems.Wind River VxWorks suffers from a buffer overflow vulnerability that stems from a networked system or product that does not properly validate da...

silent-river.de Improper Access Control vulnerability OBB-2410115

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Siemens Integer Underflow in Wind River VxWorks (CVE-2019-12255)

Wind River VxWorks has a Buffer Overflow in the TCP component issue 1 of 4. This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. C...

Siemens Stack-Based Buffer Overflow in Wind River VxWorks (CVE-2019-12256)

Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET security vulnerability: Stack overflow in the parsing of IPv4 packets' IP options. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. C...

Siemens Concurrent Execution Using Shared Resource with Improper Synchronization in Wind River VxWorks (CVE-2019-12263)

Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component issue 4 of 4. There is an IPNET security vulnerability: TCP Urgent Pointer state confusion due to race condition. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

Siemens Null Pointer Dereference in Wind River VxWorks (CVE-2019-12259)

Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. There is an IPNET security vulnerability: DoS via NULL dereference in IGMP parsing. - Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. There...

Siemens Heap-Based Buffer Overflow in Wind River VxWorks (CVE-2019-12257)

Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. There is an IPNET security vulnerability: Heap overflow in DHCP Offer/ACK parsing inside ipdhcpc. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...