CVE-2010-2965 The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and other products, allows remote at...
HighCVSS 10.0
EPSS 57.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and other products, allows remote attackers to read or modify arbitrary memory locations, perform function calls, or manage tasks via requests to UDP port 17185, a related issue to CVE-2005-3804.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rockwellautomation 1756-enbta firmware | = 3.2.6 | No fix listed |
| rockwellautomation 1756-enbta firmware | = 3.6.1 | No fix listed |
| windriver vxworks | <= 6.9.4.12 | No fix listed |
References
- blog.metasploit.com not-applicable
- rockwellautomation.custhelp.com permissions-required
- VU#362332 third-party-advisory us-government-resource
- www.kb.cert.org third-party-advisory us-government-resource
- www.kb.cert.org third-party-advisory us-government-resource
- support.windriver.com permissions-required
- seclists.org