Skip to main content
Apexward Pulse

CVE-2010-2965

What this means

This is rated critical severity (9.8 out of 10). Current estimates put the chance of attack in the next 30 days at roughly 58%. Ask IT whether Rockwellautomation 1756 Enbt\/a Firmware, Windriver Vxworks and Rockwellautomation 1756 Enbt\/a are in your estate, and treat that as the priority.

Full vendor description

The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and other products, allows remote attackers to read or modify arbitrary memory locations, perform function calls, or manage tasks via requests to UDP port 17185, a related issue to CVE-2005-3804.

Scoring and exploitation

9.8/ 10
CVSS 3.1 base scoreCritical

Exploitable over the network without any account, and no one has to click or open anything. High impact on confidentiality, integrity and availability.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability

Longer bar: easier to attack

Attack vectorNetworkAV:N
Attack complexityLowAC:L
Privileges requiredNonePR:N
User interactionNoneUI:N
ScopeUnchangedS:U

Impact

Longer bar: more harm

ConfidentialityHighC:H
IntegrityHighI:H
AvailabilityHighA:H
Elevated attack likelihood (~57.5% in 30 days)Model estimate (): a probability signal, not confirmed exploitation
Exploited in the wild
Not confirmed in the
Not reported

Weaknesses

CWE-863

Affected products ()

  • Rockwellautomation 1756 Enbt\/a Firmware
  • Windriver Vxworks
  • Rockwellautomation 1756 Enbt\/a
Show the raw CPE strings (4)
  • cpe:2.3:o:rockwellautomation:1756-enbt\/a_firmware:3.2.6:*:*:*:*:*:*:*
  • cpe:2.3:o:rockwellautomation:1756-enbt\/a_firmware:3.6.1:*:*:*:*:*:*:*
  • cpe:2.3:o:windriver:vxworks:*:*:*:*:*:*:*:*
  • cpe:2.3:h:rockwellautomation:1756-enbt\/a:-:*:*:*:*:*:*:*

References

13 links from the CVE record, grouped by site.