Improper input validation in Windriver Vxworks
CVE-2013-0714
IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote attackers to execute arbitrary code or cause a denial of service (daemon hang) via a crafted public-key authentication request.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.093 (92.9th percentile) — read the EPSS interpretation.
Affected products
- Windriver Vxworks — versions 6.5, 6.6, 6.7
- N/a — versions n/a
Weakness classification (CWE)
References
- JVN#20671901 (x_refsource_JVN, third-party-advisory)
- vultures@jpcert.or.jp (x_refsource_MISC)
- JVNDB-2013-000021 (x_refsource_JVNDB, third-party-advisory)
- vultures@jpcert.or.jp (x_refsource_MISC)