Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 05/08/2010 Updated: 05/08/2010

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

VMScore: 694

Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N

The INCLUDE_SECURITY functionality in Wind River VxWorks 6.x, 5.x, and previous versions uses the LOGIN_USER_NAME and LOGIN_USER_PASSWORD (aka LOGIN_PASSWORD) parameters to create hardcoded credentials, which makes it easier for remote malicious users to obtain access via a (1) telnet, (2) rlogin, or (3) FTP session.

Vulnerable Product	Search on Vulmon	Subscribe to Product
windriver vxworks
windriver vxworks 5.5
windriver vxworks 6.4
windriver vxworks 5
windriver vxworks 6

CWE-255 http://blog.metasploit.com/2010/08/vxworks-vulnerabilities.html http://www.kb.cert.org/vuls/id/840249 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2010-2966

Vulnerability Summary

References

Vulmon Search

About

Products

Connect