CVE-2010-2967

2022-10-0316:21:07

mitre

www.cve.org

wind river

vxworks

password vulnerability

remote access

6.5 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.2%

JSON

The loginDefaultEncrypt algorithm in loginLib in Wind River VxWorks before 6.9 does not properly support a large set of distinct possible passwords, which makes it easier for remote attackers to obtain access via a (1) telnet, (2) rlogin, or (3) FTP session.