Design/Logic Flaw

Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component...

CVE-2019-12264

Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component...

CVE-2019-12264

CVE-2019-12264 affects Wind River VxWorks IPNet IP DHCP client (ipdhcpc) and allows Improper Neutralization of Argument Delimiters in a Command (Argument Injection) in IPv4 address assignment. Affected products include VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4 and VxWorks 7. Likely impact is memory/log...

URGENT/11: VxWorks RTOS 11 0 day vulnerabilities affect 20 million device-bug warning-the black bar safety net

Armis Labs security researchers recently in the currently most widely used embedded devices in real timeoperating system real-time operating systems, RTOS）VxWorks found 11 a 0 day vulnerability, theoperating systemis widely used in aerospace, defense, industrial, medical, electronic, network, and...

Wind River Systems VxWorks Numeric Error Vulnerability

Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems. A numeric error vulnerability exists in Wind River Systems VxWorks. An attacker could exploit this vulnerability to execute code...

Wind River Systems VxWorks Parameter Injection Vulnerability (CNVD-2019-25702)

Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems. A parameter injection vulnerability exists in Wind River Systems VxWorks. An attacker could exploit this vulnerability by sending a reverse ARP response to an affected system to assign a unicast IPv...

Wind River Systems VxWorks Competitive Conditions Issue Vulnerability

Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems. A competitive conditions issue vulnerability exists in Wind River Systems VxWorks. The vulnerability arises from improper handling of concurrent access when concurrent code requires mutually exclusi...

Wind River Systems VxWorks Parameter Denial of Service Vulnerability

Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems. A parameter injection vulnerability exists in Wind River Systems VxWorks. An attacker could exploit this vulnerability to cause a denial of service via malformed TCP options...

RTOS VxWorks multiple high-risk vulnerability alerts-a vulnerability alert-the black bar safety net

Armis researchers in the VxWorks discovered 11 zero-day vulnerabilities, VxWorks is a popular real timeoperating system（RTOS）, is more than 20 million devices in use, including industrial, medical and business equipment and other mission-critical equipment. These vulnerabilities are referred to...

Wind River Systems VxWorks Parameter Injection Vulnerability

Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems. A parameter injection vulnerability exists in Wind River Systems VxWorks. The vulnerability arises from a network system or product that does not properly filter special characters in parameters...

Wind River Systems VxWorks Buffer Overflow Vulnerability (CNVD-2019-25705)

Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems. A buffer overflow vulnerability exists in VxWorks versions 7 and 6.9. The vulnerability can be exploited by an attacker to execute code via a malformed TCP AO option...

Wind River Systems VxWorks Code Issue Vulnerability

Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems. A code issue vulnerability exists in Wind River Systems VxWorks. The vulnerability arises from an improper design or implementation during code development for a networked system or product. No...

Wind River Systems VxWorks Parameter Injection Vulnerability (CNVD-2019-25707)

Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems. A parameter injection vulnerability exists in Wind River Systems VxWorks. The vulnerability arises from a network system or product that does not properly filter special characters in parameters...

Wind River Systems VxWorks Buffer Overflow Vulnerability (CNVD-2019-25704)

Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems. A buffer error vulnerability exists in the DHCP Offer/ACK parsing of ipdhcpc in Wind River Systems VxWorks. An attacker could exploit this vulnerability to overwrite the heap and execute code...

Wind River Systems VxWorks Buffer Overflow Vulnerability (CNVD-2019-25701)

Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems. A buffer overflow vulnerability exists in Wind River Systems VxWorks. An attacker could exploit this vulnerability to execute code...

Wind River VxWorks (Update A)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Wind River Equipment: VxWorks Vulnerabilities: Stack-based Buffer Overflow, Heap-based Buffer Overflow, Integer Underflow, Improper Restriction of Operations within the Bounds of a Memory Buffer,...

CISA Releases Advisory on Wind River VxWorks Platform

The Cybersecurity and Infrastructure Security Agency CISA has released an Industrial Control Systems ICS Advisory on multiple vulnerabilities in the Wind River VxWorks Platform. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages...

BSA-2019-840

Security Advisory ID : BSA-2019-840 Component : VxWorks Revision : 1.0: Initial The Armis research team, Armis Labs, have discovered 11 zero day vulnerabilities in VxWorks®. VxWorks is used by over 2 billion devices including critical industrial, medical and enterprise devices. Dubbed “URGENT/11,...

A VxWorks Operating System Bug Exposes 200 Million Critical Devices

VxWorks is designed as a secure, "real-time" operating system for continuously functioning devices, like medical equipment, elevator controllers, or satellite modems...

'URGENT/11' Critical Infrastructure Bugs Threaten EternalBlue-Style Attacks

UPDATE A cadre of 11 vulnerabilities, six of them critical remote code-execution RCE bugs, have been uncovered that affect millions of critical infrastructure systems, such as SCADA gear at utilities, elevator and industrial controllers, patient monitors and MRI machines, programmable logic...