Approved changes feed: RSS · Atom

cpe:2.3:o:windriver:vxworks:6.6:*:*:*:*:*:*:*

part: o version: 6.6 update: *

VendorWindriver (1c9d3e00-99c4-5be7-a4c6-5cc8709ef134)
ProductVxworks (437ab3e0-0513-5f7d-b676-0a34e46c28dc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-9865 vulnerable 2026-06-08 05:14:26.346611 Details available
When RPC is enabled in Wind River VxWorks 6.9 prior to 6.9.1, a specially crafted RPC request can trigger an integer overflow leading to an out-of-bounds memory copy. It may allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code.
Published: 2019-05-29T16:33:27.000Z
Updated: 2024-08-04T22:01:54.887Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12264 vulnerable 2026-06-08 05:12:38.837654 Details available
Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component.
Published: 2019-08-05T17:34:25.000Z
Updated: 2024-08-04T23:17:39.330Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12262 vulnerable 2026-06-08 05:12:38.830190 Details available
Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component. IPNET security vulnerability: Handling of unsolicited Reverse ARP replies (Logical Flaw).
Published: 2019-08-14T19:18:13.000Z
Updated: 2024-08-04T23:17:39.465Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0716 vulnerable 2026-06-08 05:03:49.505717 Details available
The web server in Wind River VxWorks 5.5 through 6.9 allows remote attackers to cause a denial of service (daemon crash) via a crafted URI.
Published: 2013-03-20T18:00:00.000Z
Updated: 2024-08-06T14:33:05.518Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0715 vulnerable 2026-06-08 05:03:49.505361 Details available
The WebCLI component in Wind River VxWorks 5.5 through 6.9 allows remote authenticated users to cause a denial of service (CLI session crash) via a crafted command string.
Published: 2013-03-20T18:00:00.000Z
Updated: 2024-08-06T14:33:05.501Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0714 vulnerable 2026-06-08 05:03:49.504981 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0713 vulnerable 2026-06-08 05:03:49.504599 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0712 vulnerable 2026-06-08 05:03:49.504190 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0711 vulnerable 2026-06-08 05:03:49.501503 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.