Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component. IPNET security vulnerability: Handling of unsolicited Reverse ARP replies (Logical Flaw).
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HBelden Garrettcom Magnum Dx940e
HWBeldenall versionsBelden Garrettcom Magnum Dx940e Firmware
OSBelden≤ 1.0.1_y7Belden Hirschmann Dragon Mach4000
HWBeldenall versionsBelden Hirschmann Dragon Mach4500
HWBeldenall versionsBelden Hirschmann Eagle20
HWBeldenall versionsBelden Hirschmann Eagle30
HWBeldenall versionsBelden Hirschmann Eagle One
HWBeldenall versionsBelden Hirschmann Ees20
HWBeldenall versionsBelden Hirschmann Ees25
HWBeldenall versionsBelden Hirschmann Eesx20
HWBeldenall versionsBelden Hirschmann Eesx30
HWBeldenall versionsBelden Hirschmann Grs1020
HWBeldenall versionsBelden Hirschmann Grs1030
HWBeldenall versionsBelden Hirschmann Grs1042
HWBeldenall versionsBelden Hirschmann Grs1120
HWBeldenall versionsBelden Hirschmann Grs1130
HWBeldenall versionsBelden Hirschmann Grs1142
HWBeldenall versionsBelden Hirschmann Hios
OSBelden≤ 07.5.01≤ 07.0.07≤ 05.3.06≤ 07.2.04Belden Hirschmann Msp30
HWBeldenall versionsBelden Hirschmann Msp32
HWBeldenall versionsBelden Hirschmann Msp40
HWBeldenall versionsBelden Hirschmann Octopus Os3
HWBeldenall versionsBelden Hirschmann Rail Switch Power Lite
HWBeldenall versionsBelden Hirschmann Rail Switch Power Smart
HWBeldenall versionsBelden Hirschmann Red25
HWBeldenall versionsBelden Hirschmann Rsp20
HWBeldenall versionsBelden Hirschmann Rsp25
HWBeldenall versionsBelden Hirschmann Rsp30
HWBeldenall versionsBelden Hirschmann Rsp35
HWBeldenall versionsBelden Hirschmann Rspe30
HWBeldenall versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
References
Related vulnerabilities
CVE-2021-27734CRITICAL9.8PL ✓same product
Zdalne przejęcie konta użytkownika w Belden Hirschmann HiOS i HiSecOS
CVE-2020-35198CRITICAL9.8PL ✓same product
Integer overflow w alokatorze pamięci Wind River VxWorks 7 (calloc)
CVE-2021-29999CRITICAL9.8PL ✓same product
Stack overflow w serwerze DHCP systemu Wind River VxWorks
CVE-2021-29998CRITICAL9.8PL ✓same product
Heap overflow w kliencie DHCP systemu Wind River VxWorks
CVE-2016-20009CRITICAL9.8PL ✓same product
Stack-based buffer overflow w kliencie DNS Wind River VxWorks