CVE-2010-2965 — Incorrect Authorization in Vxworks

CWE-863 — Incorrect Authorization4 documents4 sources
Severity
10.0CRITICALNVD
CNA6.4
EPSS
93.1%
top 0.21%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Windriver VxworksRockwellautomation 1756-enbt A Firmware
Timeline
PublishedAug 5
Latest updateMay 17

Description

The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and other products, allows remote attackers to read or modify arbitrary memory locations, perform function calls, or manage tasks via requests to UDP port 17185, a related issue to CVE-2005-3804.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages2 packages

▶NVDwindriver/vxworks6.9.4.12

🔴Vulnerability Details

2
GHSA
GHSA-4hhv-jc45-cmpc: The WDB target agent debug service in Wind River VxWorks 6↗2022-05-17
▶
CVEList
CVE-2010-2965: The WDB target agent debug service in Wind River VxWorks 6↗2010-08-04
▶
CVE-2010-2965 — Incorrect Authorization in Vxworks | cvebase