cbcvebase.
CVE-2010-2966
published 2010-08-05

CVE-2010-2966: The INCLUDE_SECURITY functionality in Wind River VxWorks 6.x, 5.x, and earlier uses the LOGIN_USER_NAME and LOGIN_USER_PASSWORD (aka LOGIN_PASSWORD) parameters…

PriorityP335high7.8CVSS 2.0
AVNACLAuNCCINAN
EPSS
1.54%
71.7th percentile
The INCLUDE_SECURITY functionality in Wind River VxWorks 6.x, 5.x, and earlier uses the LOGIN_USER_NAME and LOGIN_USER_PASSWORD (aka LOGIN_PASSWORD) parameters to create hardcoded credentials, which makes it easier for remote attackers to obtain access via a (1) telnet, (2) rlogin, or (3) FTP session.

Affected

5 ranges
VendorProductVersion rangeFixed in
windrivervxworks<= 6.8—
windrivervxworks——
windrivervxworks——
windrivervxworks——
windrivervxworks——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.