CVE Catalog

CVE-2010-2965

Critical
Published: Translated: NVD NIST

Summary

The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1, allows remote attackers to read or modify arbitrary memory locations, perform function calls, or manage tasks via requests to UDP port 17185.

Risk Assessment

Attackers may gain access to critical data or system functions, potentially leading to serious security breaches and system destabilization.

Recommendation

It is recommended to block access to UDP port 17185 and update the firmware to the latest version to minimize risk.

Original NVD description (English source)

The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and other products, allows remote attackers to read or modify arbitrary memory locations, perform function calls, or manage tasks via requests to UDP port 17185, a related issue to CVE-2005-3804.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS