Code injection

2020-07-2314:15:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.2%

httpRpmFs in WebCLI in Wind River VxWorks 5.5 through 7 SR0640 has no check for an escape from the web root.

CPENameOperatorVersion
vxworkseq7.0
vxworkseq7.0 sr630
vxworksge5.5
vxworkslt7.0

Name	Operator	Version
vxworks	eq	7.0
vxworks	eq	7.0 sr630
vxworks	ge	5.5
vxworks	lt	7.0

References

support2.windriver.com/index.php?page=cve&on=view&id=CVE-2020-11440

windriver.com