VDB

CVE-2010-2966

CVE-2010-2966 PUBLISHED CVSS 7.800000190734863 HIGH

The INCLUDE_SECURITY functionality in Wind River VxWorks 6.x, 5.x, and earlier uses the LOGIN_USER_NAME and LOGIN_USER_PASSWORD (aka LOGIN_PASSWORD) parameters to create hardcoded credentials, which makes it easier for remote attackers to obtain access via a (1) telnet, (2) rlogin, or (3) FTP session.

EPSS 0.41% · 61.8th percentile

Risk Scores

CVSS 2.0
7.800000190734863
EPSS Score
0.41%
61.8th percentile

Affected Products

VendorProductVersions
windrivervxworks0, 5, 5.5
n/an/an/a

Timeline

  • Aug 2, 2010 CVE Published
  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • May 17, 2022 CVE Updated
  • May 20, 2022 EPSS Score
  • Jul 12, 2022 EPSS Score
  • Sep 4, 2022 EPSS Score
  • Oct 26, 2022 EPSS Score
  • Dec 18, 2022 EPSS Score
  • Feb 9, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 2, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›