Lucene search
HistoryOct 03, 2022 - 4:21 p.m.
CVE-2010-2967
cve-2010-2967
vxworks
logindefaultencrypt
security vulnerability
remote access
telnet
rlogin
ftp
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.7 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
59.2%
The loginDefaultEncrypt algorithm in loginLib in Wind River VxWorks before 6.9 does not properly support a large set of distinct possible passwords, which makes it easier for remote attackers to obtain access via a (1) telnet, (2) rlogin, or (3) FTP session.
Affected configurations
Node
windrivervxworksRange≤6.8
ORwindrivervxworksMatch5
ORwindrivervxworksMatch5.5
ORwindrivervxworksMatch6
ORwindrivervxworksMatch6.4
Related
cert
cert
cvelist
cvelist
CVE-2010-2967
2022-10-03 16:21:07
prion
prion
Session fixation
2010-08-05 13:22:00
nvd
nvd
CVE-2010-2967
2010-08-05 13:22:29
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.7 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
59.2%
Related for CVE-2010-2967