Описание
An issue was discovered in Wind River VxWorks 7 before 21.03. A specially crafted packet may lead to buffer over-read on IKE.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 7.0 (включая) до 21.03 (исключая)
cpe:2.3:o:windriver:vxworks:*:*:*:*:*:*:*:*
EPSS
Процентиль: 33%
0.00127
Низкий
5.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
CWE-125
Связанные уязвимости
github
больше 3 лет назад
XML External Entity Resolution (XXE) in Helix ALM. The XML Import functionality of the Administration console in Perforce Helix ALM 2020.3.1 Build 22 accepts XML input data that is parsed by insecurely configured software components, leading to XXE attacks.
EPSS
Процентиль: 33%
0.00127
Низкий
5.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
CWE-125