Vulnerability in Schneider-electric Sage_1210

CVE-2015-3963

Wind River VxWorks before 5.5.1, 6.5.x through 6.7.x before 6.7.1.1, 6.8.x before 6.8.3, 6.9.x before 6.9.4.4, and 7.x before 7 ipnet_coreip 1.2.2.0, as used on Schneider Electric SAGE RTU devices before J2 and other devices, does not prop…

EPSS: 0.030 (86.9th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References

  • 75302 (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_BID)
  • 1032730 (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_SECTRACK)
  • ics-cert@hq.dhs.gov (x_refsource_CONFIRM, Patch, Third Party Advisory)
  • ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)
  • 1033181 (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_SECTRACK)
  • ics-cert@hq.dhs.gov (x_refsource_CONFIRM, Third Party Advisory)
  • ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)