VxWorks WDB Agent Remote Reboot

This module provides the ability to reboot a VxWorks target through WDBRPC This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'VxWorks WDB Agent Remote Reboot', 'Description' = %q This module...

VxWorks WDB Agent Boot Parameter Scanner

Scan for exposed VxWorks wdbrpc daemons and dump the boot parameters from memory This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'VxWorks WDB Agent Boot Parameter Scanner', 'Description' = 'Scan...

VxWorks WDB Agent Version Scanner

Scan for exposed VxWorks wdbrpc daemons This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'VxWorks WDB Agent Version Scanner', 'Description' = 'Scan for exposed VxWorks wdbrpc daemons', 'Author' =...

Wind River Systems VxWorks debug service enabled by default

Overview Some products based on VxWorks have the WDB target agent debug service enabled by default. This service provides read/write access to the device's memory and allows functions to be called. Description The VxWorks WDB target agent is a target-resident, run-time facility that is required f...

Wind River Systems VxWorks weak default hashing algorithm in standard authentication API (loginLib)

Overview The hashing algorithm that is used in the standard authentication API for VxWorks is susceptible to collisions. An attacker can brute force a password by guessing a string that produces the same hash as a legitimate password. Description An attacker with a known username and access to a...

VxWorks OS Is Open to Attack

Renowned researcher HD Moore next week will reveal how a misconfiguration by developers using the VxWorks operating system found in many embedded systems has left a trail of vulnerable products across various vendors’ products. Read the full article. Dark Reading...

Design/Logic Flaw

The IPv6 Neighbor Discovery Protocol NDP implementation in 1 FreeBSD 6.3 through 7.1, 2 OpenBSD 4.2 and 4.3, 3 NetBSD, 4 Force10 FTOS before E7.7.1.1, 5 Juniper JUNOS, and 6 Wind River VxWorks 5.x through 6.4 does not validate the origin of Neighbor Discovery messages, which allows remote attacke...

CVE-2008-2476

The CVE-2008-2476 issue concerns the IPv6 Neighbor Discovery Protocol (NDP) implementation in several vendors (FreeBSD 6.3–7.1; OpenBSD 4.2–4.3; NetBSD; Force10 FTOS pre-E7.7.1.1; Juniper JUNOS; Wind River VxWorks 5.x–6.4) that does not validate the origin of Neighbor Discovery messages. This all...

Icon Labs Iconfidant SSH服务器多个拒绝服务漏洞

BUGTRAQ ID: 29609 Iconfident SSH是运行在基于VxWorks系统上的SSH服务器。 Iconfidant SSH服务器中存在多个漏洞，可能导致系统不稳定。在SSH登录期间，如果在积极时间帧中执行了登录，或发送了无效的认证凭据，或在登录时同时执行了其他管理操作的话，就可以触发这些漏洞，导致拒绝服务。 Icon Labs Iconfidant SSH 2.3.7 Icon Labs --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.icon-labs.com/...

CVE-2006-1067

Linksys WRT54G routers version 5 running VXWorks allow remote attackers to cause a denial of service by sending a malformed DCC SEND string to an IRC channel, which causes an IRC connection reset, possibly related to the masquerading code for NAT environments, and as demonstrated via 1 a DCC SEND...

Code injection

Netgear 614 and 624 routers, possibly running VXWorks, allow remote attackers to cause a denial of service by sending a malformed DCC SEND string to an IRC channel, which causes an IRC connection reset, possibly related to the masquerading code for NAT environments, and as demonstrated via 1 a DC...

CVE-2006-1067

Linksys WRT54G routers version 5 running VXWorks allow remote attackers to cause a denial of service by sending a malformed DCC SEND string to an IRC channel, which causes an IRC connection reset, possibly related to the masquerading code for NAT environments, and as demonstrated via 1 a DCC SEND...

CVE-2006-1068

Netgear 614 and 624 routers, possibly running VXWorks, allow remote attackers to cause a denial of service by sending a malformed DCC SEND string to an IRC channel, which causes an IRC connection reset, possibly related to the masquerading code for NAT environments, and as demonstrated via 1 a DC...

CVE-2006-1067

CVE-2006-1067 affects Linksys WRT54G routers versions 5 running VXWorks. The vulnerability allows remote attackers to trigger a denial-of-service by sending a malformed DCC SEND string to an IRC channel, causing an IRC connection reset. The issue may be related to masquerading code for NAT enviro...

CVE-2006-1068

Affected products: Netgear 614 and 624 routers (likely VXWorks). Vulnerability: remote attacker can cause a denial of service by sending a malformed DCC SEND string to an IRC channel, leading to an IRC connection reset. Possible cause: linked to masquerading code for NAT environments; details men...

irssi IRC client / multiple routers DoS

Crash on DCC commands processing. Multiple routers with VxWorks embedded process IRC requests and drop IRC connection...

Various router DoS

It appears that various routers are prone to an IRC-only DoS attack. Particularly Netgear and Linksys routers have been shown vulnerable. If a client behind one of the vulnerable routers connects to an IRC server on port 6667 and only 6667, does not DoS with other ports and a user posts the...

Multiple Routers - IRC Request Disconnect Denial of Service

Multiple Routers - IRC Request Disconnect Denial of Service It appears that various routers are prone to an IRC-only DoS attack. Particularly Netgear and Linksys routers have been shown vulnerable. If a client behind one of the vulnerable routers connects to an IRC server on port 6667 and only...

Multiple Routers (IRC Request) Disconnect Denial of Service Vulnerability

Exploit for hardware platform in category dos / poc ========================================================================= Multiple Routers IRC Request Disconnect Denial of Service Vulnerability ========================================================================= It appears that various...

Multiple Routers (IRC Request) Disconnect Denial of Service Vulnerability

No description provided by source. It appears that various routers are prone to an IRC-only DoS attack. Particularly Netgear and Linksys routers have been shown vulnerable. If a client behind one of the vulnerable routers connects to an IRC server on port 6667 and only 6667, does not DoS with oth...