Wind River VxWorks: Schwachstelle ermöglicht Privilegieneskalation
NEOSEC enrichment — no mirror of the original source
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Wind River VxWorks ausnutzen, um beliebigen Code auszuführen und erhöhte Berechtigungen zu erlangen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Highbsi:WID-SEC-2026-37041 linked CVE
Open advisory with all CVEs
More on VxWorks
Other advisories
- HighCVE-2026-104018Wind River VxWorks: Schwachstelle ermöglicht Privilegieneskalation
- HighCVE-2026-104018Wind River Systems VxWorks 7: Rechteausweitung
- HighCVE-2026-104018In der Befehlszeile von Wind River VxWorks 7 existiert aufgrund einer unzureichenden Rechteverwaltung (CWE-269) eine Schwachstelle, wenn sie...
- HighCVE-2026-102005Wind River VxWorks 7: Mehrere Schwachstellen
- MediumCVE-2026-102005Wind River VxWorks 7: Speicherleck
- MediumCVE-2026-102006Wind River Systems VxWorks 7: Speicherleck
- MediumCVE-2026-102006In Wind River VxWorks 7 vor Version 26.
- MediumCVE-2026-102005In Wind River VxWorks 7 24.
Other news entries
- Wind River VxWorks 7: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- SSA-726834 V1.0: Denial of Service Vulnerability in the RADIUS Client of SIPROTEC 5 DevicesNewsSiemens ProductCERT
- SSA-560465 V1.0: DHCP Client Vulnerability in VxWorks-based Industrial ProductsNewsSiemens ProductCERT
- SSA-102233 (Last Update: 2020-04-14): SegmentSmack in VxWorks-based Industrial DevicesNewsSiemens ProductCERT
- SSA-189842 (Last Update: 2019-09-10): TCP URGENT/11 Vulnerabilities in RUGGEDCOM WinNewsSiemens ProductCERT
- SSA-617233 V1.0: Urgent/11 TCP/IP Stack Vulnerabilities in SIPROTEC 4 7SJ66 DevicesNewsSiemens ProductCERT
- SSA-102233 V2.1 (Last Update: 2023-04-11): SegmentSmack in VxWorks-based Industrial DevicesNewsSiemens ProductCERT
- SSA-352504 (Last Update: 2020-05-12): Urgent/11 TCP/IP Stack Vulnerabilities in Siemens Power MetersNewsSiemens ProductCERT
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3704
ID