Wind River VxWorks 7: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein lokaler Angreifer kann mehrere Schwachstellen in Wind River VxWorks ausnutzen, um einen Denial of Service Angriff durchzuführen, möglicherweise beliebigen Code auszuführen und Daten offenzulegen oder zu manipulieren.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Highbsi:WID-SEC-2026-36244 linked CVEs
Open advisory with all CVEs
More on VxWorks
Other advisories
- HighCVE-2026-104018Wind River VxWorks: Schwachstelle ermöglicht Privilegieneskalation
- HighCVE-2026-104018Wind River Systems VxWorks 7: Rechteausweitung
- HighCVE-2026-104018In der Befehlszeile von Wind River VxWorks 7 existiert aufgrund einer unzureichenden Rechteverwaltung (CWE-269) eine Schwachstelle, wenn sie...
- HighCVE-2026-102005Wind River VxWorks 7: Mehrere Schwachstellen
- MediumCVE-2026-102005Wind River VxWorks 7: Speicherleck
- MediumCVE-2026-102006In Wind River VxWorks 7 vor Version 26.
- MediumCVE-2026-102006Wind River Systems VxWorks 7: Speicherleck
- MediumCVE-2026-102005In Wind River VxWorks 7 24.
Other news entries
- Wind River VxWorks: Schwachstelle ermöglicht PrivilegieneskalationVulnerabilityBSI CERT-Bund
- SSA-102233 V2.1 (Last Update: 2023-04-11): SegmentSmack in VxWorks-based Industrial DevicesNewsSiemens ProductCERT
- SSA-726834 V1.0: Denial of Service Vulnerability in the RADIUS Client of SIPROTEC 5 DevicesNewsSiemens ProductCERT
- SSA-352504 (Last Update: 2020-05-12): Urgent/11 TCP/IP Stack Vulnerabilities in Siemens Power MetersNewsSiemens ProductCERT
- SSA-102233 (Last Update: 2020-04-14): SegmentSmack in VxWorks-based Industrial DevicesNewsSiemens ProductCERT
- SSA-560465 V1.0: DHCP Client Vulnerability in VxWorks-based Industrial ProductsNewsSiemens ProductCERT
- SSA-617233 V1.0: Urgent/11 TCP/IP Stack Vulnerabilities in SIPROTEC 4 7SJ66 DevicesNewsSiemens ProductCERT
- SSA-189842 (Last Update: 2019-09-10): TCP URGENT/11 Vulnerabilities in RUGGEDCOM WinNewsSiemens ProductCERT
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3624
ID