WaratekVRT Sign in
Reset
More filters (2)
Columns
Including CVEs outside Waratek scope✕EPSS ≥ 0.5✕Vendor windriver✕
Overview 5 matches · 0 in Waratek scope · 0 protected · 1 exploited · 0 CISA KEV · 2 public PoC
5matches 0in Waratek scope0.0% 0protected0.0% 1exploited20.0% 0CISA KEV0.0% 2public PoC40.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 3 60.0% Not applicable 2 40.0% Withdrawn CVE 0 0.0%
Critical 2 40.0% High 2 40.0% Medium 1 20.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 5 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 1 20.0% Working exploit published 1 20.0% Proof of concept only 0 0.0% Forecast only 3 60.0% No public exploit 0 0.0%
split by peak 3 / year
Not applicable: 2Outside Waratek scope: 3 Medium: 1High: 2Critical: 2 not blocked: 5 Forecast only: 3Working exploit published: 1Exploited: 1
20031 Not applicable1 High1 not blocked1 Working exploit published1 20040 20050 20060 20070 20080 20090 20101 Not applicable1 Critical1 not blocked1 Forecast only1 20110 20120 20130 20140 20150 20160 20170 20180 20193 Outside Waratek scope3 Critical1 High1 Medium1 not blocked3 Exploited1 Forecast only2
200320052007200920112013201520172019
5 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2019-12265 Medium 2019-08-09 Outside Waratek scope Forecast only Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There is an IPNET security vulnerability: IGMP Information leak via IGMPv3 specific membership report.
CVE-2019-12257 High 2019-08-09 Outside Waratek scope Forecast only Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. There is an IPNET security vulnerability: Heap overflow in DHCP Offer/ACK parsing inside ipdhcpc.
CVE-2019-12255 Critical 2019-08-09 Outside Waratek scope Exploited Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow.
CVE-2010-2965 Critical 2010-08-05 Not applicable Forecast only The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and other products, allows remote attackers to read or modify arbitrary memory locations, perform function calls, or manage tasks via requests to UDP port 17185, a related issue to CVE-2005-3804.
CVE-2002-1337 High 2003-03-07 Not applicable Working exploit published Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.