Lucene search
+L

637 matches found

Tenable Nessus
Tenable Nessus
•added 2022/02/07 12:00 a.m.•42 views

Siemens Improper Neutralization of Argument Delimiters in a Command in Wind River VxWorks (CVE-2019-12258)

Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. This is a IPNET security vulnerability: DoS of TCP connection via malformed TCP options. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. C Tenable,...

7.5CVSS8.5AI score0.22772EPSS
SaveExploits2References14
CNVD
CNVD
•added 2021/11/25 12:00 a.m.•46 views

Wind River VxWorks Resource Management Error Vulnerability

Wind River VxWorks is an operating system from Wind River, Inc. the industry-leading real-time operating system for building embedded devices and systems. A security vulnerability exists in VxWorks 6.9 through 7, which stems from a specially designed packet in the IKE component that could result ...

6.5CVSS6.6AI score0.00876EPSS
SaveExploits0References1
NCSC
NCSC
•added 2021/11/25 12:00 a.m.•14 views

Vulnerability fixed in VxWorks

A vulnerability has been fixed in Wind River VxWorks 6.9 and 7. A malicious party could potentially exploit the vulnerability to cause a Denial-of-Service by sending a specially prepared network packet to the IKE service. Wind River has released updates to fix the vulnerability fix in VxWorks. Fo...

6.5CVSS6.8AI score0.00876EPSS
SaveExploits0
NCSC
NCSC
•added 2021/11/22 12:00 a.m.•36 views

Vulnerabilities fixed in Wind River Linux

Vulnerabilities have been fixed in Wind River Linux. The vulnerabilities allow a malicious person to carry out attacks execute attacks that lead to the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution Administrator/Root rights Remote co...

9.8CVSS7.1AI score0.59547EPSS
SaveExploits47
Tenable Nessus
Tenable Nessus
•added 2021/10/27 12:00 a.m.•76 views

Wind River VxWorks <= 6.8 RCE

According to its self-reported version, the remote device is Wind River VxWorks and it's affected by a remote code execution vulnerability. An issue was discovered in Wind River VxWorks through 6.8. There is a possible stack overflow in dhcp server. Note that Nessus has not tested for this issue...

9.8CVSS8.4AI score0.01789EPSS
SaveExploits0References2
Pen Test Partners Blog
Pen Test Partners Blog
•added 2021/09/14 5:47 a.m.•34 views

EFB Tampering. Approach and Landing Performance Part 2

Approach and Landing Performance Part 2: Approach Speeds, Cold Weather Corrections, Sources of Data Click here for part 1 Target: Approach speed calculation The speed at which aircraft fly on approach depends on a variety of factors including: Aircraft weight Flap setting Wind direction/speed Fin...

6.9AI score
SaveExploits0
NCSC
NCSC
•added 2021/08/30 12:00 a.m.•37 views

Vulnerabilities fixed in Wind River Linux

Wind River has found and fixed vulnerabilities in Wind River Linux. The vulnerabilities potentially enable a malicious person to able to perform attacks that result in the following categories of damage: Denial-of-Service DoS Remote code execution User Rights Access to sensitive data Access to...

9.8CVSS7.1AI score0.87816EPSS
SaveExploits63
Tenable Nessus
Tenable Nessus
•added 2021/08/20 12:00 a.m.•252 views

Wind River VxWorks < 7.0 Multiple Vulnerabilities

According to its self-reported version, the remote device is Wind River VxWorks and it's affected by multiple vulnerabilities: - The memory allocator has a possible integer overflow in calculating a memory block's size to be allocated by calloc. As a result, the actual memory allocated is smaller...

9.8CVSS7.8AI score0.02491EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/08/03 12:00 a.m.•19 views

3S-Smart Software Solutions CODESYS V3 Runtime Toolkit 安全漏洞

3s-smart Software Solutions 3S-Smart Software Solutions CODESYS V3 Runtime Toolkit is a comprehensive software development toolkit from 3S-Smart Software Solutions 3s-smart Software Solutions, Germany. 3S-Smart Software Solutions 3s-smart Software Solutions, Germany is a comprehensive software...

7.5CVSS7.3AI score0.00961EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2021/07/09 12:00 a.m.•47 views

Wind River VxWorks RTOS Detection

Binary data windrivervxworksrtosdetect.nbin...

7.3AI score
SaveExploits0References1
NVD
NVD
•added 2021/05/12 11:15 a.m.•60 views

CVE-2020-35198

An issue was discovered in Wind River VxWorks 7. The memory allocator has a possible integer overflow in calculating a memory block's size to be allocated by calloc. As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption...

9.8CVSS0.02491EPSS
SaveExploits0References3
OSV
OSV
•added 2021/05/12 11:15 a.m.•8 views

CVE-2020-35198

An issue was discovered in Wind River VxWorks 7. The memory allocator has a possible integer overflow in calculating a memory block's size to be allocated by calloc. As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption...

9.8CVSS6AI score0.02491EPSS
SaveExploits0References3
Prion
Prion
•added 2021/05/12 11:15 a.m.•32 views

Integer overflow

An issue was discovered in Wind River VxWorks 7. The memory allocator has a possible integer overflow in calculating a memory block's size to be allocated by calloc. As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption...

7.5CVSS9.5AI score0.02491EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist
•added 2021/05/12 10:55 a.m.•73 views

CVE-2020-35198

An issue was discovered in Wind River VxWorks 7. The memory allocator has a possible integer overflow in calculating a memory block's size to be allocated by calloc. As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption...

9.7AI score0.02491EPSS
SaveExploits0References3
CVE
CVE
•added 2021/05/12 10:55 a.m.•117 views

CVE-2020-35198

CVE-2020-35198 affects Wind River VxWorks 7. The vulnerability is caused by an integer overflow in the memory allocator when calculating a memory block size for calloc(), resulting in the allocated memory being smaller than the requested buffer and causing memory corruption. Public documents in c...

9.8CVSS9.5AI score0.02491EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/12 12:00 a.m.•3 views

CVE-2020-35198: Integer Overflow or Wraparound

An issue was discovered in Wind River VxWorks 7. The memory allocator has a possible integer overflow in calculating a memory block's size to be allocated by calloc. As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption...

9.8CVSS6AI score0.02491EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/04/29 12:00 a.m.•18 views

Wind River VxWorks 输入验证错误漏洞

Wind River VxWorks is an operating system from Wind River, Inc. the industry-leading real-time operating system for building embedded devices and systems. An input validation error vulnerability exists in Wind River VxWorks 7 that stems from the fact that this incorrect memory allocation could...

9.8CVSS8.2AI score0.02491EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
•added 2021/04/14 12:00 a.m.•12 views

The vulnerability of IGMP-based real-time operating system implementations in Wind River VxWorks allows a attacker to trigger a service failure.

The vulnerability of IGMP-based real-time operating system implementations by Wind River and VxWorks is related to the use of a zero pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS7.2AI score0.01377EPSS
SaveExploits0References3Affected Software2
OSV
OSV
•added 2021/04/13 5:15 p.m.•16 views

CVE-2021-29997

An issue was discovered in Wind River VxWorks 7 before 21.03. A specially crafted packet may lead to buffer over-read on IKE...

5.3CVSS6AI score0.0103EPSS
SaveExploits0References2
OSV
OSV
•added 2021/04/13 5:15 p.m.•14 views

CVE-2021-29999

An issue was discovered in Wind River VxWorks through 6.8. There is a possible stack overflow in dhcp server...

9.8CVSS5.8AI score0.01789EPSS
SaveExploits0References1
Rows per page
Query Builder