Windriver: >> Vxworks >> 7 Security Vulnerabilities
An issue was discovered in VxWorks 6.9 through 7. In the IKE component, a specifically crafted packet may lead to reading beyond the end of a buffer, or a double free.
CVSS Score
6.5
EPSS Score
0.001
Published
2021-11-24
A DNS client stack-based buffer overflow in ipdnsc_decode_name() affects Wind River VxWorks 6.5 through 7. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS Score
9.8
EPSS Score
0.004
Published
2021-03-11
httpRpmFs in WebCLI in Wind River VxWorks 5.5 through 7 SR0640 has no check for an escape from the web root.
CVSS Score
7.5
EPSS Score
0.003
Published
2020-07-23