VxWorks 5.5 through 6.9 Multiple Vulnerabilities

Critical Nessus Plugin ID 69864


The remote VxWorks device is potentially affected by several vulnerabilities.


According to its self-reported version, the remote VxWorks device is version 5.5 through 6.9. It therefore is potentially affected by the following vulnerabilities :

- An attacker can cause SSH access to be unavailable until the next reboot with a specially crafted requests. (CVE-2013-0711 / CVE-2013-0712 / CVE-2013-0713)

- An attacker can cause the server to hang and SSH access to be unavailable until the next reboot by sending a specially crafted packet for a public key authentication request. Arbitrary code execution is also a possibility. (CVE-2013-0714)

- An attacker able to login to a CLI session can cause the current CLI session to crash. (CVE-2013-0715)

- An attacker able to access the VxWorks Web Server can cause the server to crash using a specially crafted URL. (CVE-2013-0716)

Note that the Web Server and CLI vulnerabilities affect VxWorks 5.5 through 6.9 while the SSH vulnerabilities affect only versions 6.5 through 6.9.

Note that Nessus has not checked for the presence of the patch so this finding may be a false positive.


Contact the device vendor for the appropriate patch.

See Also







Plugin Details

Severity: Critical

ID: 69864

File Name: vxworks_ipssh_and_www_multi_dos.nasl

Version: $Revision: 1.6 $

Type: remote

Family: Misc.

Published: 2013/09/13

Modified: 2016/05/09

Dependencies: 11936

Risk Information

Risk Factor: Critical


Base Score: 10

Temporal Score: 8.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:ND/RL:OF/RC:C

Vulnerability Information

Required KB Items: Settings/ParanoidReport, Host/OS

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2013/03/18

Vulnerability Publication Date: 2013/03/18

Reference Information

CVE: CVE-2013-0711, CVE-2013-0712, CVE-2013-0713, CVE-2013-0714, CVE-2013-0715, CVE-2013-0716

BID: 58638, 58539, 58640, 58641, 58642, 58643

OSVDB: 91512, 91513, 91514, 91515, 91516, 91517

ICSA: 13-091-01