cyfenced.com →

[ CVE-2010-2965 · Published 4 Aug 2010 ]

Vulnerability

CVSS 9.8 EPSS 47%1 agency advisoryNo fix listed yet

[ Why it matters ]Priority signals

  • EPSS: 47% chance of exploitation in the next 30 days (higher than 99% of CVEs)
  • Critical severity: CVSS 9.8

[ Description ]Official description

The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and other products, allows remote attackers to read or modify arbitrary memory locations, perform function calls, or manage tasks via requests to UDP port 17185, a related issue to CVE-2005-3804.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

[ References ]References