Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: windriver'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2020-35198 7.5 An issue was discovered in Wind River VxWorks 7. The memory allocator has a possible integer overflow in calculating a memory block's size to be allocated by calloc(). As a result, the actual memory allocated is smaller than the buffer size specified 2022-05-12 14:06:00
CVE-2022-23937 5.0 In Wind River VxWorks 6.9 and 7, a specific crafted packet may lead to an out-of-bounds read during an IKE initial exchange scenario. 2022-04-05 20:10:00
CVE-2021-43268 6.4 An issue was discovered in VxWorks 6.9 through 7. In the IKE component, a specifically crafted packet may lead to reading beyond the end of a buffer, or a double free. 2021-12-01 14:07:00
CVE-2015-3963 5.8 Wind River VxWorks before 5.5.1, 6.5.x through 6.7.x before 6.7.1.1, 6.8.x before 6.8.3, 6.9.x before 6.9.4.4, and 7.x before 7 ipnet_coreip 1.2.2.0, as used on Schneider Electric SAGE RTU devices before J2 and other devices, does not properly genera 2021-07-22 13:09:00
CVE-2020-11440 5.0 httpRpmFs in WebCLI in Wind River VxWorks 5.5 through 7 SR0640 has no check for an escape from the web root. 2021-07-21 11:39:00
CVE-2021-29997 5.0 An issue was discovered in Wind River VxWorks 7 before 21.03. A specially crafted packet may lead to buffer over-read on IKE. 2021-06-10 15:03:00
CVE-2021-29999 7.5 An issue was discovered in Wind River VxWorks through 6.8. There is a possible stack overflow in dhcp server. 2021-04-16 19:04:00
CVE-2020-10664 5.0 The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference. 2021-02-22 21:47:00
CVE-2020-10288 7.5 IRC5 exposes an ftp server (port 21). Upon attempting to gain access you are challenged with a request of username and password, however you can input whatever you like. As long as the field isn't empty it will be accepted. 2020-07-23 17:22:00
CVE-2019-9865 6.8 When RPC is enabled in Wind River VxWorks 6.9 prior to 6.9.1, a specially crafted RPC request can trigger an integer overflow leading to an out-of-bounds memory copy. It may allow remote attackers to cause a denial of service (crash) or possibly exec 2019-05-29 19:20:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/5
Zapisa po stranici: