Lucene search
+L

552 matches found

CNVD
CNVD
added 2020/04/28 12:0 a.m.6 views

Wind River Systems VxWorks IGMP Component Code Issue Vulnerability

Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems, Inc.IGMP is one of the Internet Group Management Protocol components. A code issue vulnerability exists in the IGMP component of Wind River Systems VxWorks. The vulnerability arises from an improper...

7.5CVSS7.1AI score0.01343EPSS
Exploits0References1
CNVD
CNVD
added 2020/04/28 12:0 a.m.5 views

Wind River Systems VxWorks tftp client library resource management error vulnerability

Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems, Inc. tftp client library is one of the TFTP Common File Transfer Protocol client libraries. A resource management error vulnerability exists in the tftp client library in Wind River Systems VxWorks...

6.8AI score
Exploits0References1
NVD
NVD
added 2020/04/27 1:15 p.m.16 views

CVE-2020-10664

The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference...

7.5CVSS7.5AI score0.01343EPSS
Exploits0References1
OSV
OSV
added 2020/04/27 1:15 p.m.6 views

CVE-2020-10664

The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference...

7.5CVSS7.1AI score0.01343EPSS
Exploits0References1
Prion
Prion
added 2020/04/27 1:15 p.m.16 views

Null pointer dereference

The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference...

5CVSS7.5AI score0.01343EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/04/27 12:21 p.m.23 views

CVE-2020-10664

The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference...

7.5AI score0.01343EPSS
Exploits0References1
CVE
CVE
added 2020/04/27 12:21 p.m.52 views

CVE-2020-10664

Affected product/component: Wind River VxWorks 6.8.3 IPNET (IGMP component) with CVE patches created in 2019. Vulnerability: NULL pointer dereference in the IGMP code path. Impact (as stated): Availability impact of the vulnerable component is reported as HIGH (CVSS‑3.1) and PARTIAL (CVSS‑2.0) wi...

7.5CVSS7.5AI score0.01343EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2020/04/14 8:15 p.m.25 views

CVE-2019-19301

A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE X202-2IRT, SCALANCE X202-2P IRT, SCALANCE X202-2P IRT PRO, SCALANCE X204-2, SCALANCE X204-2FM, SCALANCE X204-2LD, SCALANCE X204-2LD TS, SCALANCE X204-2TS, SCALANCE X204IRT, SCALAN...

7.5CVSS7.4AI score0.01327EPSS
Exploits0References1
Prion
Prion
added 2020/04/14 8:15 p.m.17 views

Code injection

A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE X202-2IRT, SCALANCE X202-2P IRT, SCALANCE X202-2P IRT PRO, SCALANCE X204-2, SCALANCE X204-2FM, SCALANCE X204-2LD, SCALANCE X204-2LD TS, SCALANCE X204-2TS, SCALANCE X204IRT, SCALAN...

5CVSS7.4AI score0.01327EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/04/14 7:50 p.m.32 views

CVE-2019-19301

A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE X202-2IRT, SCALANCE X202-2P IRT, SCALANCE X202-2P IRT PRO, SCALANCE X204-2, SCALANCE X204-2FM, SCALANCE X204-2LD, SCALANCE X204-2LD TS, SCALANCE X204-2TS, SCALANCE X204IRT, SCALAN...

7.5CVSS7.4AI score0.01327EPSS
Exploits0References1
CVE
CVE
added 2020/04/14 7:50 p.m.123 views

CVE-2019-19301

CVE-2019-19301 affects Siemens SCALANCE and SIMATIC Profinet devices (broad SCALANCE X200/X300 series and related modules) where the VxWorks-based Profinet TCP stack can be forced to perform very expensive calls for every incoming packet, enabling a Denial of Service. Affected components are Prof...

7.5CVSS7.4AI score0.01327EPSS
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/04/06 12:0 a.m.5 views

The vulnerability of TCP protocols in real-time operating systems like Wind River VxWorks allows attackers to trigger service interruptions.

The vulnerability of the TCP protocol in real-time operating systems like Wind River VxWorks is related to errors in the creation of TCP options. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

5.3CVSS7.8AI score0.23354EPSS
Exploits2References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/04/06 12:0 a.m.7 views

The vulnerability of the IPv4 protocol in real-time operating systems like Wind River VxWorks allows attackers to compromise the integrity and accessibility of protected information.

The vulnerability of the IPv4 protocol for real-time operating systems developed by Wind River VxWorks is related to insufficient access control mechanisms, such as ipdhcpc and DHCP. Exploiting this vulnerability could allow attackers to compromise the integrity and accessibility of protected...

5.4CVSS7.2AI score0.08311EPSS
Exploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/04/06 12:0 a.m.6 views

The vulnerability of TCP protocols in real-time operating systems like Wind River VxWorks allows attackers to execute arbitrary code.

The vulnerability of the TCP protocol in real-time operating systems like Wind River VxWorks stems from errors related to the TCP Urgent Pointer during the use of shared resources „Race Conditions“. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending...

8.1CVSS8.5AI score0.03189EPSS
Exploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/06 12:0 a.m.8 views

The vulnerability of the RARP protocol in real-time operating systems like Wind River VxWorks allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the RARP protocol in real-time operating systems of Wind River VxWorks is related to errors in processing unwanted reverse ARP responses a logical flaw. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of...

7.5CVSS8.1AI score0.04116EPSS
Exploits0References5Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/06 12:0 a.m.6 views

The vulnerability of the IGMPv3 protocol in real-time operating systems like Wind River VxWorks allows a hacker to access confidential information.

The vulnerability of the IGMPv3 protocol in real-time operating systems like Wind River VxWorks involves exposing IGMP information through a special report. Exploiting this vulnerability can allow attackers to access confidential information...

5.3CVSS7.2AI score0.55271EPSS
Exploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/06 12:0 a.m.7 views

The vulnerability of the IGMPv3 protocol in real-time operating systems like Wind River VxWorks allows a attacker to trigger a service failure.

The vulnerability of IGMPv3 protocols in real-time operating systems like Wind River VxWorks is related to an array indexing error. Exploiting this vulnerability could allow a malicious actor to cause service failure by renaming “NULL” as IGMP...

7.5CVSS7.8AI score0.15882EPSS
Exploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/03/27 12:0 a.m.5 views

The vulnerability of TCP protocols in real-time operating systems like Wind River VxWorks allows attackers to trigger service interruptions.

The vulnerability of the TCP protocol in real-time operating systems like Wind River VxWorks stems from the loss of the integer value “TCP Urgent Pointer=0”. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted TCP packets...

10CVSS7.2AI score0.7525EPSS
Exploits5References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/03/27 12:0 a.m.6 views

The vulnerability of TCP protocols in real-time operating systems like Wind River VxWorks allows attackers to execute arbitrary code.

The vulnerability of the TCP protocol in real-time operating systems like Wind River VxWorks stems from errors in the TCP Urgent Pointer during the “connect” operation when connecting to a remote host. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially...

10CVSS8.6AI score0.08967EPSS
Exploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/03/27 12:0 a.m.7 views

The vulnerability of the DHCP protocol for real-time operating systems like Wind River VxWorks allows a perpetrator to execute arbitrary code.

The vulnerability of the DHCP protocol for real-time operating systems like Wind River VxWorks is related to a potential overflow during the parsing of DHCP/DACK messages within the ipdhcpc process. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially crafted...

8.8CVSS8.5AI score0.84177EPSS
Exploits0References7Affected Software4
Rows per page
Query Builder