CVE-2010-2967
published 2010-08-05CVE-2010-2967: The loginDefaultEncrypt algorithm in loginLib in Wind River VxWorks before 6.9 does not properly support a large set of distinct possible passwords, which…
PriorityP336high7.8CVSS 2.0
AVNACLAuNCCINAN
EPSS
1.72%
74.6th percentile
The loginDefaultEncrypt algorithm in loginLib in Wind River VxWorks before 6.9 does not properly support a large set of distinct possible passwords, which makes it easier for remote attackers to obtain access via a (1) telnet, (2) rlogin, or (3) FTP session.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| windriver | vxworks | <= 6.8 | — |
| windriver | vxworks | — | — |
| windriver | vxworks | — | — |
| windriver | vxworks | — | — |
| windriver | vxworks | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://blog.metasploit.com/2010/08/vxworks-vulnerabilities.htmlhttp://www.kb.cert.org/vuls/id/840249http://www.kb.cert.org/vuls/id/MAPG-863QH9https://support.windriver.com/olsPortal/faces/maintenance/downloadDetails.jspx?contentId=033709http://blog.metasploit.com/2010/08/vxworks-vulnerabilities.htmlhttp://www.kb.cert.org/vuls/id/840249http://www.kb.cert.org/vuls/id/MAPG-863QH9https://support.windriver.com/olsPortal/faces/maintenance/downloadDetails.jspx?contentId=033709
2010-08-05
Published