Approved changes feed: RSS · Atom

cpe:2.3:o:windriver:vxworks:6.7:*:*:*:*:*:*:*

part: o version: 6.7 update: *

VendorWindriver (1c9d3e00-99c4-5be7-a4c6-5cc8709ef134)
ProductVxworks (437ab3e0-0513-5f7d-b676-0a34e46c28dc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-9865 vulnerable 2026-06-08 05:14:26.347813 Details available
When RPC is enabled in Wind River VxWorks 6.9 prior to 6.9.1, a specially crafted RPC request can trigger an integer overflow leading to an out-of-bounds memory copy. It may allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code.
Published: 2019-05-29T16:33:27.000Z
Updated: 2024-08-04T22:01:54.887Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12264 vulnerable 2026-06-08 05:12:38.837677 Details available
Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component.
Published: 2019-08-05T17:34:25.000Z
Updated: 2024-08-04T23:17:39.330Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12262 vulnerable 2026-06-08 05:12:38.830988 Details available
Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component. IPNET security vulnerability: Handling of unsolicited Reverse ARP replies (Logical Flaw).
Published: 2019-08-14T19:18:13.000Z
Updated: 2024-08-04T23:17:39.465Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7599 vulnerable 2026-06-08 05:07:01.500393 Details available
Integer overflow in the _authenticate function in svc_auth.c in Wind River VxWorks 5.5 through 6.9.4.1, when the Remote Procedure Call (RPC) protocol is enabled, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a username and password.
Published: 2017-02-07T17:00:00.000Z
Updated: 2024-08-06T07:51:28.614Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0716 vulnerable 2026-06-08 05:03:49.505735 Details available
The web server in Wind River VxWorks 5.5 through 6.9 allows remote attackers to cause a denial of service (daemon crash) via a crafted URI.
Published: 2013-03-20T18:00:00.000Z
Updated: 2024-08-06T14:33:05.518Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0715 vulnerable 2026-06-08 05:03:49.505378 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0714 vulnerable 2026-06-08 05:03:49.505001 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0713 vulnerable 2026-06-08 05:03:49.504617 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0712 vulnerable 2026-06-08 05:03:49.504209 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0711 vulnerable 2026-06-08 05:03:49.502303 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.