Known Vulnerabilities for products from Windriver
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Windriver".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-23937 | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 7.5 - HIGH | 2022-03-29 | 2022-04-05 |
| CVE-2021-43268 | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 6.5 - MEDIUM | 2021-11-24 | 2021-12-01 |
| CVE-2021-29999 | An issue was discovered in Wind River VxWorks through 6.8. There is a possible stack overflow in dhcp server. | 9.8 - CRITICAL | 2021-04-13 | 2021-04-16 |
| CVE-2021-29998 | An issue was discovered in Wind River VxWorks before 6.5. There is a possible heap overflow in dhcp client. | 9.8 - CRITICAL | 2021-04-13 | 2022-10-05 |
| CVE-2021-29997 | An issue was discovered in Wind River VxWorks 7 before 21.03. A specially crafted packet may lead to buffer over-read on IKE. | 5.3 - MEDIUM | 2021-04-13 | 2021-06-10 |
| CVE-2021-3450 | The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is... | 7.4 - HIGH | 2021-03-25 | 2023-11-07 |
| CVE-2021-3449 | An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 r... | 5.9 - MEDIUM | 2021-03-25 | 2023-11-07 |
| CVE-2020-35198 | An issue was discovered in Wind River VxWorks 7. The memory allocator has a possible integer overflow in calculating a memory... | 9.8 - CRITICAL | 2021-05-12 | 2022-05-12 |
| CVE-2020-28895 | In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by cal... | 7.3 - HIGH | 2021-02-03 | 2022-05-12 |
| CVE-2020-11440 | httpRpmFs in WebCLI in Wind River VxWorks 5.5 through 7 SR0640 has no check for an escape from the web root. | 7.5 - HIGH | 2020-07-23 | 2021-07-21 |
| CVE-2020-10664 | The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference. | 7.5 - HIGH | 2020-04-27 | 2021-02-22 |
| CVE-2020-10288 | IRC5 exposes an ftp server (port 21). Upon attempting to gain access you are challenged with a request of username and passwo... | 9.8 - CRITICAL | 2020-07-15 | 2020-07-23 |
| CVE-2019-12265 | Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There is an IPNET se... | 5.3 - MEDIUM | 2019-08-09 | 2022-08-12 |
| CVE-2019-12264 | Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP c... | 7.1 - HIGH | 2019-08-05 | 2022-06-16 |
| CVE-2019-12263 | Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4). There is an IPNET security vulner... | 8.1 - HIGH | 2019-08-09 | 2022-08-12 |
| CVE-2019-12262 | Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component. IPNET security vulnera... | 9.8 - CRITICAL | 2019-08-14 | 2022-06-16 |
| CVE-2019-12261 | Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4). This is an IPNET securit... | 9.8 - CRITICAL | 2019-08-09 | 2022-08-12 |
| CVE-2019-12260 | Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4). This is an IPNET security vulnerabi... | 9.8 - CRITICAL | 2019-08-09 | 2022-08-12 |
| CVE-2019-12259 | Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. There is an IPNET secu... | 7.5 - HIGH | 2019-08-09 | 2022-06-16 |
| CVE-2019-12258 | Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. This is a IPNET security vulnerability: DoS of ... | 7.5 - HIGH | 2019-08-09 | 2022-08-12 |
Known software with vulnerabilities from Windriver
| Type | Vendor | Product | Version |
|---|---|---|---|
| Operating System | Windriver | Bsdos | - |
| Application | Windriver | Diabcompiler | 4.4 |
| Operating System | Windriver | Platform Sa | - |
| Operating System | Windriver | Vxworks | 5 |
| Application | Windriver | Workbench | 3.0 |
| Operating System | Windriver | Wrlinux | 8.0 |