Known Vulnerabilities for products from Windriver
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Windriver".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-38346 json | An issue was discovered in Wind River VxWorks 6.9 and 7. The function ``tarExtract`` implements TAR file extraction and there... | 8.8 - HIGH | 2023-09-22 | 2023-09-26 |
| CVE-2022-38767 json | An issue was discovered in Wind River VxWorks 6.9 and 7, that allows a specifically crafted packet sent by a Radius server, m... | Not Provided | 2022-11-25 | 2026-04-14 |
| CVE-2022-23937 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 7.5 - HIGH | 2022-03-29 | 2022-04-05 |
| CVE-2021-43268 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 6.5 - MEDIUM | 2021-11-24 | 2021-12-01 |
| CVE-2021-29999 json | An issue was discovered in Wind River VxWorks through 6.8. There is a possible stack overflow in dhcp server. | 9.8 - CRITICAL | 2021-04-13 | 2021-04-16 |
| CVE-2021-29998 json | An issue was discovered in Wind River VxWorks before 6.5. There is a possible heap overflow in dhcp client. | 9.8 - CRITICAL | 2021-04-13 | 2022-10-05 |
| CVE-2021-29997 json | An issue was discovered in Wind River VxWorks 7 before 21.03. A specially crafted packet may lead to buffer over-read on IKE. | 5.3 - MEDIUM | 2021-04-13 | 2021-06-10 |
| CVE-2021-3450 json | The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is... | 7.4 - HIGH | 2021-03-25 | 2023-11-07 |
| CVE-2021-3449 json | An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 r... | 5.9 - MEDIUM | 2021-03-25 | 2023-11-07 |
| CVE-2020-35198 json | An issue was discovered in Wind River VxWorks 7. The memory allocator has a possible integer overflow in calculating a memory... | 9.8 - CRITICAL | 2021-05-12 | 2022-05-12 |
| CVE-2020-28895 json | In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by cal... | 7.3 - HIGH | 2021-02-03 | 2022-05-12 |
| CVE-2020-11440 json | httpRpmFs in WebCLI in Wind River VxWorks 5.5 through 7 SR0640 has no check for an escape from the web root. | 7.5 - HIGH | 2020-07-23 | 2021-07-21 |
| CVE-2020-10664 json | The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference. | 7.5 - HIGH | 2020-04-27 | 2021-02-22 |
| CVE-2020-10288 json | IRC5 exposes an ftp server (port 21). Upon attempting to gain access you are challenged with a request of username and passwo... | 9.8 - CRITICAL | 2020-07-15 | 2020-07-23 |
| CVE-2019-12265 json | Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There is an IPNET se... | 5.3 - MEDIUM | 2019-08-09 | 2022-08-12 |
| CVE-2019-12264 json | Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP c... | 7.1 - HIGH | 2019-08-05 | 2022-06-16 |
| CVE-2019-12263 json | Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4). There is an IPNET security vulner... | 8.1 - HIGH | 2019-08-09 | 2022-08-12 |
| CVE-2019-12262 json | Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component. IPNET security vulnera... | 9.8 - CRITICAL | 2019-08-14 | 2022-06-16 |
| CVE-2019-12261 json | Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4). This is an IPNET securit... | 9.8 - CRITICAL | 2019-08-09 | 2022-08-12 |
| CVE-2019-12260 json | Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4). This is an IPNET security vulnerabi... | 9.8 - CRITICAL | 2019-08-09 | 2022-08-12 |
Known software with vulnerabilities from Windriver
| Type | Vendor | Product | Version |
|---|---|---|---|
| Operating System | Windriver | Bsdos | - |
| Application | Windriver | Diabcompiler | 4.4 |
| Operating System | Windriver | Platform Sa | - |
| Operating System | Windriver | Vxworks | 5 |
| Application | Windriver | Workbench | 3.0 |
| Operating System | Windriver | Wrlinux | 8.0 |