Vulnerability Details CVE-2015-7599
Integer overflow in the _authenticate function in svc_auth.c in Wind River VxWorks 5.5 through 6.9.4.1, when the Remote Procedure Call (RPC) protocol is enabled, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a username and password.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.053
EPSS Ranking 89.4%
CVSS Severity
CVSS v3 Score 8.1
CVSS v2 Score 9.3
Products affected by CVE-2015-7599
-
cpe:2.3:o:windriver:vxworks:5
-
cpe:2.3:o:windriver:vxworks:5.5
-
cpe:2.3:o:windriver:vxworks:5.5.1
-
cpe:2.3:o:windriver:vxworks:6
-
cpe:2.3:o:windriver:vxworks:6.4
-
cpe:2.3:o:windriver:vxworks:6.5
-
cpe:2.3:o:windriver:vxworks:6.6
-
cpe:2.3:o:windriver:vxworks:6.6.3
-
cpe:2.3:o:windriver:vxworks:6.6.4
-
cpe:2.3:o:windriver:vxworks:6.6.4.1
-
cpe:2.3:o:windriver:vxworks:6.7
-
cpe:2.3:o:windriver:vxworks:6.8
-
cpe:2.3:o:windriver:vxworks:6.8.3
-
cpe:2.3:o:windriver:vxworks:6.9
-
cpe:2.3:o:windriver:vxworks:6.9.1
-
cpe:2.3:o:windriver:vxworks:6.9.2
-
cpe:2.3:o:windriver:vxworks:6.9.3
-
cpe:2.3:o:windriver:vxworks:6.9.3.1
-
cpe:2.3:o:windriver:vxworks:6.9.4
-
cpe:2.3:o:windriver:vxworks:6.9.4.1