Skip to main content

Windriver

47 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2024-26314 Jul 02, 16:15 HIGH This Week

Improper privilege management in Jungo WinDriver 6.0.0 through 16.1.0 allows local attackers to escalate privileges and execute arbitrary code. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation RCE Genesis64 Windriver Cpu Module Logging Configuration Tool +34
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2024-25088 Jul 02, 16:15 HIGH This Week

Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges and execute arbitrary code. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation RCE Genesis64 Windriver Cpu Module Logging Configuration Tool +34
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2024-25087 Jul 02, 16:15 MEDIUM This Month

Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.7.0 allows local attackers to cause a Windows blue screen error. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Denial Of Service Microsoft Genesis64 Windriver Cpu Module Logging Configuration Tool +34
NVD
CVSS 3.1
5.5
EPSS
0.2%
CVE-2024-25086 Jul 02, 16:15 HIGH This Week

Improper privilege management in Jungo WinDriver before 12.2.0 allows local attackers to escalate privileges and execute arbitrary code. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

RCE Code Injection Genesis64 Windriver Cpu Module Logging Configuration Tool +34
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2024-22106 Jul 02, 16:15 HIGH This Week

Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges, execute arbitrary code, or cause a Denial of Service (DoS). Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation RCE Denial Of Service Genesis64 Windriver +35
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2024-22105 Jul 02, 16:15 MEDIUM This Month

Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to cause a Windows blue screen error. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Denial Of Service Microsoft Genesis64 Windriver Cpu Module Logging Configuration Tool +34
NVD
CVSS 3.1
5.5
EPSS
0.2%
CVE-2024-22104 Jul 02, 15:15 MEDIUM This Month

Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to cause a Windows blue screen error and Denial of Service (DoS). Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Memory Corruption Microsoft Genesis64 +36
NVD
CVSS 3.1
5.5
EPSS
0.2%
CVE-2024-22103 Jul 02, 15:15 MEDIUM This Month

Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.6.0 allows local attackers to cause a Windows blue screen error and Denial of Service (DoS). Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Memory Corruption Microsoft Genesis64 +36
NVD
CVSS 3.1
5.5
EPSS
0.2%
CVE-2024-22102 Jul 02, 15:15 MEDIUM This Month

Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.6.0 allows local attackers to cause a Windows blue screen error. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Denial Of Service Microsoft Genesis64 Windriver Cpu Module Logging Configuration Tool +34
NVD
CVSS 3.1
5.5
EPSS
0.2%
CVE-2023-38346 Sep 22, 19:15 HIGH POC PATCH This Week

An issue was discovered in Wind River VxWorks 6.9 and 7. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Path Traversal Vxworks Windriver
NVD
CVSS 3.1
8.8
EPSS
1.2%
CVE-2022-38767 Nov 25, 15:15 HIGH This Week

An issue was discovered in Wind River VxWorks 6.9 and 7, that allows a specifically crafted packet sent by a Radius server, may cause Denial of Service during the IP Radius access procedure. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Vxworks Windriver
NVD VulDB
CVSS 3.1
7.5
EPSS
0.3%
CVE-2022-23937 Mar 29, 02:15 HIGH This Week

In Wind River VxWorks 6.9 and 7, a specific crafted packet may lead to an out-of-bounds read during an IKE initial exchange scenario. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Microsoft Vxworks Windriver
NVD
CVSS 3.1
7.5
EPSS
1.0%
CVE-2021-43268 Nov 24, 17:15 MEDIUM This Month

An issue was discovered in VxWorks 6.9 through 7. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Vxworks Windriver
NVD
CVSS 3.1
6.5
EPSS
0.8%
CVE-2021-29999 Apr 13, 17:15 CRITICAL Act Now

An issue was discovered in Wind River VxWorks through 6.8. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Vxworks Windriver
NVD
CVSS 3.1
9.8
EPSS
1.8%
CVE-2021-29998 Apr 13, 17:15 CRITICAL Act Now

An issue was discovered in Wind River VxWorks before 6.5. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Siemens Scalance Xf204 2Ba Irt Firmware Vxworks +35
NVD
CVSS 3.1
9.8
EPSS
2.4%
CVE-2021-29997 Apr 13, 17:15 MEDIUM This Month

An issue was discovered in Wind River VxWorks 7 before 21.03. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Vxworks Windriver
NVD
CVSS 3.1
5.3
EPSS
1.0%
CVE-2021-3450 Mar 25, 15:15 Cargo HIGH PATCH Act Now

The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Node.js OpenSSL Oracle Fedora +36
NVD
CVSS 3.1
7.4
EPSS
18.3%
CVE-2020-11440 Jul 23, 14:15 HIGH This Week

httpRpmFs in WebCLI in Wind River VxWorks 5.5 through 7 SR0640 has no check for an escape from the web root. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Vxworks Windriver
NVD
CVSS 3.1
7.5
EPSS
1.1%
CVE-2020-10664 Apr 27, 13:15 HIGH This Week

The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Null Pointer Dereference Vxworks Windriver
NVD
CVSS 3.1
7.5
EPSS
1.3%
CVE-2019-12262 Aug 14, 20:15 CRITICAL Act Now

Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Siemens Hirschmann Hios Vxworks Windriver +6
NVD
CVSS 3.1
9.8
EPSS
4.1%
CVE-2019-12261 Aug 09, 21:15 CRITICAL Act Now

Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Oracle Siemens E Series Santricity Os Controller Sonicos +15
NVD
CVSS 3.1
9.8
EPSS
9.0%
CVE-2019-12260 Aug 09, 21:15 CRITICAL Act Now

Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Oracle Siemens E Series Santricity Os Controller Sonicos +15
NVD
CVSS 3.1
9.8
EPSS
22.8%
CVE-2019-12258 Aug 09, 20:15 HIGH POC THREAT This Week

Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Session Fixation Siemens E Series Santricity Os Controller Sonicos +14
NVD GitHub
CVSS 3.1
7.5
EPSS
23.4%
CVE-2019-12255 Aug 09, 20:15 CRITICAL POC THREAT Act Now

Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Siemens E Series Santricity Os Controller Sonicos Sonicwall +13
NVD Exploit-DB
CVSS 3.1
9.8
EPSS
75.2%
CVE-2019-12265 Aug 09, 19:15 MEDIUM This Month

Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Siemens E Series Santricity Os Controller Sonicos Sonicwall +13
NVD
CVSS 3.1
5.3
EPSS
55.3%
CVE-2019-12263 Aug 09, 19:15 HIGH This Week

Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4). Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Buffer Overflow Race Condition Siemens E Series Santricity Os Controller Sonicos +14
NVD
CVSS 3.1
8.1
EPSS
3.2%
CVE-2019-12259 Aug 09, 19:15 HIGH This Week

Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Null Pointer Dereference Siemens Sonicos Sonicwall +12
NVD
CVSS 3.1
7.5
EPSS
15.9%
CVE-2019-12257 Aug 09, 18:15 HIGH This Week

Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Siemens E Series Santricity Os Controller Sonicos Sonicwall +11
NVD
CVSS 3.1
8.8
EPSS
84.2%
CVE-2019-12256 Aug 09, 18:15 CRITICAL Act Now

Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Siemens E Series Santricity Os Controller Sonicos Sonicwall +13
NVD
CVSS 3.1
9.8
EPSS
26.6%
CVE-2019-12264 Aug 05, 18:15 HIGH This Week

Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component. Rated high severity (CVSS 7.1), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Siemens Hirschmann Hios Vxworks Windriver +6
NVD
CVSS 3.1
7.1
EPSS
8.3%
CVE-2019-9865 May 29, 17:29 HIGH This Week

When RPC is enabled in Wind River VxWorks 6.9 prior to 6.9.1, a specially crafted RPC request can trigger an integer overflow leading to an out-of-bounds memory copy. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

RCE Denial Of Service Integer Overflow Vxworks Windriver
NVD
CVSS 3.0
8.1
EPSS
2.0%
CVE-2018-10072 Apr 12, 18:29 MEDIUM POC This Month

windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of service (BSOD) via a 0x953827bf DeviceIoControl call. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Windriver Jungo
NVD GitHub
CVSS 3.0
5.5
EPSS
0.4%
CVE-2018-10071 Apr 12, 18:29 MEDIUM POC This Month

windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of service (BSOD) via a 0x953826DB DeviceIoControl call. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Windriver Jungo
NVD GitHub
CVSS 3.0
5.5
EPSS
0.4%
CVE-2018-9136 Mar 30, 08:29 MEDIUM POC This Month

windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of service (BSOD) via a crafted .exe file, a different vulnerability than CVE-2018-8821. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Windriver Jungo
NVD GitHub
CVSS 3.0
5.5
EPSS
0.8%
CVE-2018-8821 Mar 20, 07:29 MEDIUM POC This Month

windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of service (BSOD) via a crafted .exe file. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Windriver Jungo
NVD GitHub
CVSS 3.0
5.5
EPSS
0.7%
CVE-2018-5189 Jan 11, 16:29 HIGH POC This Week

Race condition in Jungo Windriver 12.5.1 allows local users to cause a denial of service (buffer overflow) or gain system privileges by flipping pool buffer size, aka a "double fetch" vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Denial Of Service Windriver Jungo
NVD Exploit-DB
CVSS 3.0
7.8
EPSS
1.2%
CVE-2017-14344 Sep 12, 18:29 HIGH POC This Week

This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

RCE Windriver Jungo
NVD Exploit-DB
CVSS 3.0
7.8
EPSS
0.1%
CVE-2017-14153 Sep 11, 17:29 HIGH POC This Week

This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Windriver Jungo
NVD Exploit-DB
CVSS 3.0
7.8
EPSS
0.2%
CVE-2017-14075 Sep 11, 17:29 HIGH POC This Week

This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Memory Corruption Windriver Jungo
NVD Exploit-DB
CVSS 3.0
7.8
EPSS
0.2%
CVE-2015-7599 Feb 07, 17:59 HIGH This Week

Integer overflow in the _authenticate function in svc_auth.c in Wind River VxWorks 5.5 through 6.9.4.1, when the Remote Procedure Call (RPC) protocol is enabled, allows remote attackers to cause a. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

RCE Denial Of Service Integer Overflow Vxworks Windriver
NVD
CVSS 3.0
8.1
EPSS
8.2%
CVE-2015-3963 Aug 04, 01:59 MEDIUM PATCH This Month

Wind River VxWorks before 5.5.1, 6.5.x through 6.7.x before 6.7.1.1, 6.8.x before 6.8.3, 6.9.x before 6.9.4.4, and 7.x before 7 ipnet_coreip 1.2.2.0, as used on Schneider Electric SAGE RTU devices. Rated medium severity (CVSS 5.8), this vulnerability is remotely exploitable.

Information Disclosure Vxworks Schneider Electric Windriver
NVD
CVSS 2.0
5.8
EPSS
3.0%
CVE-2013-0716 Mar 20, 18:55 MEDIUM This Month

The web server in Wind River VxWorks 5.5 through 6.9 allows remote attackers to cause a denial of service (daemon crash) via a crafted URI. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Vxworks Windriver
NVD
CVSS 2.0
5.0
EPSS
0.7%
CVE-2013-0715 Mar 20, 18:55 MEDIUM This Month

The WebCLI component in Wind River VxWorks 5.5 through 6.9 allows remote authenticated users to cause a denial of service (CLI session crash) via a crafted command string. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Vxworks Windriver
NVD
CVSS 2.0
4.0
EPSS
0.6%
CVE-2013-0714 Mar 20, 18:55 CRITICAL Act Now

IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote attackers to execute arbitrary code or cause a denial of service (daemon hang) via a crafted public-key authentication. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Denial Of Service Vxworks Windriver
NVD
CVSS 2.0
10.0
EPSS
9.3%
CVE-2013-0713 Mar 20, 18:55 MEDIUM This Month

IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote authenticated users to cause a denial of service (daemon outage) via a crafted pty request. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Vxworks Windriver
NVD
CVSS 2.0
6.8
EPSS
0.7%
CVE-2013-0712 Mar 20, 18:55 MEDIUM This Month

IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote authenticated users to cause a denial of service (daemon outage) via a crafted packet. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Vxworks Windriver
NVD
CVSS 2.0
6.8
EPSS
0.8%
CVE-2013-0711 Mar 20, 18:55 HIGH This Week

IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote attackers to cause a denial of service (daemon outage) via a crafted authentication request. Rated high severity (CVSS 7.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Vxworks Windriver
NVD
CVSS 2.0
7.8
EPSS
1.9%
CVE-2024-26314
EPSS 0% CVSS 7.8
HIGH This Week

Improper privilege management in Jungo WinDriver 6.0.0 through 16.1.0 allows local attackers to escalate privileges and execute arbitrary code. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation RCE Genesis64 +36
NVD
CVE-2024-25088
EPSS 0% CVSS 7.8
HIGH This Week

Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges and execute arbitrary code. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation RCE Genesis64 +36
NVD
CVE-2024-25087
EPSS 0% CVSS 5.5
MEDIUM This Month

Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.7.0 allows local attackers to cause a Windows blue screen error. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Denial Of Service Microsoft Genesis64 +36
NVD
CVE-2024-25086
EPSS 0% CVSS 7.8
HIGH This Week

Improper privilege management in Jungo WinDriver before 12.2.0 allows local attackers to escalate privileges and execute arbitrary code. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

RCE Code Injection Genesis64 +36
NVD
CVE-2024-22106
EPSS 0% CVSS 7.8
HIGH This Week

Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges, execute arbitrary code, or cause a Denial of Service (DoS). Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation RCE Denial Of Service +37
NVD
CVE-2024-22105
EPSS 0% CVSS 5.5
MEDIUM This Month

Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to cause a Windows blue screen error. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Denial Of Service Microsoft Genesis64 +36
NVD
CVE-2024-22104
EPSS 0% CVSS 5.5
MEDIUM This Month

Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to cause a Windows blue screen error and Denial of Service (DoS). Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Memory Corruption +38
NVD
CVE-2024-22103
EPSS 0% CVSS 5.5
MEDIUM This Month

Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.6.0 allows local attackers to cause a Windows blue screen error and Denial of Service (DoS). Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Memory Corruption +38
NVD
CVE-2024-22102
EPSS 0% CVSS 5.5
MEDIUM This Month

Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.6.0 allows local attackers to cause a Windows blue screen error. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Denial Of Service Microsoft Genesis64 +36
NVD
CVE-2023-38346
EPSS 1% CVSS 8.8
HIGH POC PATCH This Week

An issue was discovered in Wind River VxWorks 6.9 and 7. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Path Traversal Vxworks Windriver
NVD
CVE-2022-38767
EPSS 0% CVSS 7.5
HIGH This Week

An issue was discovered in Wind River VxWorks 6.9 and 7, that allows a specifically crafted packet sent by a Radius server, may cause Denial of Service during the IP Radius access procedure. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Vxworks Windriver
NVD VulDB
CVE-2022-23937
EPSS 1% CVSS 7.5
HIGH This Week

In Wind River VxWorks 6.9 and 7, a specific crafted packet may lead to an out-of-bounds read during an IKE initial exchange scenario. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Microsoft +2
NVD
CVE-2021-43268
EPSS 1% CVSS 6.5
MEDIUM This Month

An issue was discovered in VxWorks 6.9 through 7. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Vxworks Windriver
NVD
CVE-2021-29999
EPSS 2% CVSS 9.8
CRITICAL Act Now

An issue was discovered in Wind River VxWorks through 6.8. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Vxworks +1
NVD
CVE-2021-29998
EPSS 2% CVSS 9.8
CRITICAL Act Now

An issue was discovered in Wind River VxWorks before 6.5. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Siemens +37
NVD
CVE-2021-29997
EPSS 1% CVSS 5.3
MEDIUM This Month

An issue was discovered in Wind River VxWorks 7 before 21.03. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Vxworks +1
NVD
CVE-2021-3450 Cargo
EPSS 18% CVSS 7.4
HIGH PATCH Act Now

The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Node.js OpenSSL +38
NVD
CVE-2020-11440
EPSS 1% CVSS 7.5
HIGH This Week

httpRpmFs in WebCLI in Wind River VxWorks 5.5 through 7 SR0640 has no check for an escape from the web root. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Vxworks Windriver
NVD
CVE-2020-10664
EPSS 1% CVSS 7.5
HIGH This Week

The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Null Pointer Dereference Vxworks +1
NVD
CVE-2019-12262
EPSS 4% CVSS 9.8
CRITICAL Act Now

Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Siemens Hirschmann Hios +8
NVD
CVE-2019-12261
EPSS 9% CVSS 9.8
CRITICAL Act Now

Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Oracle Siemens +17
NVD
CVE-2019-12260
EPSS 23% CVSS 9.8
CRITICAL Act Now

Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Oracle Siemens +17
NVD
CVE-2019-12258
EPSS 23% CVSS 7.5
HIGH POC THREAT This Week

Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Session Fixation Siemens +16
NVD GitHub
CVE-2019-12255
EPSS 75% CVSS 9.8
CRITICAL POC THREAT Act Now

Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Siemens E Series Santricity Os Controller +15
NVD Exploit-DB
CVE-2019-12265
EPSS 55% CVSS 5.3
MEDIUM This Month

Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Siemens E Series Santricity Os Controller +15
NVD
CVE-2019-12263
EPSS 3% CVSS 8.1
HIGH This Week

Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4). Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Buffer Overflow Race Condition Siemens +16
NVD
CVE-2019-12259
EPSS 16% CVSS 7.5
HIGH This Week

Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Null Pointer Dereference Siemens +14
NVD
CVE-2019-12257
EPSS 84% CVSS 8.8
HIGH This Week

Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Siemens E Series Santricity Os Controller +13
NVD
CVE-2019-12256
EPSS 27% CVSS 9.8
CRITICAL Act Now

Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Siemens E Series Santricity Os Controller +15
NVD
CVE-2019-12264
EPSS 8% CVSS 7.1
HIGH This Week

Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component. Rated high severity (CVSS 7.1), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Siemens Hirschmann Hios +8
NVD
CVE-2019-9865
EPSS 2% CVSS 8.1
HIGH This Week

When RPC is enabled in Wind River VxWorks 6.9 prior to 6.9.1, a specially crafted RPC request can trigger an integer overflow leading to an out-of-bounds memory copy. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

RCE Denial Of Service Integer Overflow +2
NVD
CVE-2018-10072
EPSS 0% CVSS 5.5
MEDIUM POC This Month

windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of service (BSOD) via a 0x953827bf DeviceIoControl call. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Windriver Jungo
NVD GitHub
CVE-2018-10071
EPSS 0% CVSS 5.5
MEDIUM POC This Month

windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of service (BSOD) via a 0x953826DB DeviceIoControl call. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Windriver Jungo
NVD GitHub
CVE-2018-9136
EPSS 1% CVSS 5.5
MEDIUM POC This Month

windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of service (BSOD) via a crafted .exe file, a different vulnerability than CVE-2018-8821. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Windriver Jungo
NVD GitHub
CVE-2018-8821
EPSS 1% CVSS 5.5
MEDIUM POC This Month

windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of service (BSOD) via a crafted .exe file. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Windriver Jungo
NVD GitHub
CVE-2018-5189
EPSS 1% CVSS 7.8
HIGH POC This Week

Race condition in Jungo Windriver 12.5.1 allows local users to cause a denial of service (buffer overflow) or gain system privileges by flipping pool buffer size, aka a "double fetch" vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Denial Of Service Windriver +1
NVD Exploit-DB
CVE-2017-14344
EPSS 0% CVSS 7.8
HIGH POC This Week

This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

RCE Windriver Jungo
NVD Exploit-DB
CVE-2017-14153
EPSS 0% CVSS 7.8
HIGH POC This Week

This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Windriver +1
NVD Exploit-DB
CVE-2017-14075
EPSS 0% CVSS 7.8
HIGH POC This Week

This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Memory Corruption +2
NVD Exploit-DB
CVE-2015-7599
EPSS 8% CVSS 8.1
HIGH This Week

Integer overflow in the _authenticate function in svc_auth.c in Wind River VxWorks 5.5 through 6.9.4.1, when the Remote Procedure Call (RPC) protocol is enabled, allows remote attackers to cause a. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

RCE Denial Of Service Integer Overflow +2
NVD
CVE-2015-3963
EPSS 3% CVSS 5.8
MEDIUM PATCH This Month

Wind River VxWorks before 5.5.1, 6.5.x through 6.7.x before 6.7.1.1, 6.8.x before 6.8.3, 6.9.x before 6.9.4.4, and 7.x before 7 ipnet_coreip 1.2.2.0, as used on Schneider Electric SAGE RTU devices. Rated medium severity (CVSS 5.8), this vulnerability is remotely exploitable.

Information Disclosure Vxworks Schneider Electric +1
NVD
CVE-2013-0716
EPSS 1% CVSS 5.0
MEDIUM This Month

The web server in Wind River VxWorks 5.5 through 6.9 allows remote attackers to cause a denial of service (daemon crash) via a crafted URI. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Vxworks Windriver
NVD
CVE-2013-0715
EPSS 1% CVSS 4.0
MEDIUM This Month

The WebCLI component in Wind River VxWorks 5.5 through 6.9 allows remote authenticated users to cause a denial of service (CLI session crash) via a crafted command string. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Vxworks Windriver
NVD
CVE-2013-0714
EPSS 9% CVSS 10.0
CRITICAL Act Now

IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote attackers to execute arbitrary code or cause a denial of service (daemon hang) via a crafted public-key authentication. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Denial Of Service Vxworks +1
NVD
CVE-2013-0713
EPSS 1% CVSS 6.8
MEDIUM This Month

IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote authenticated users to cause a denial of service (daemon outage) via a crafted pty request. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Vxworks Windriver
NVD
CVE-2013-0712
EPSS 1% CVSS 6.8
MEDIUM This Month

IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote authenticated users to cause a denial of service (daemon outage) via a crafted packet. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Vxworks Windriver
NVD
CVE-2013-0711
EPSS 2% CVSS 7.8
HIGH This Week

IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote attackers to cause a denial of service (daemon outage) via a crafted authentication request. Rated high severity (CVSS 7.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Vxworks Windriver
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy