First published: Wed Mar 20 2013(Updated: )
The web server in Wind River VxWorks 5.5 through 6.9 allows remote attackers to cause a denial of service (daemon crash) via a crafted URI.
Credit: vultures@jpcert.or.jp
Affected Software | Affected Version | How to fix |
---|---|---|
Wind River VxWorks | =6.5 | |
Wind River VxWorks | =6.6 | |
Wind River VxWorks | =6.7 | |
Wind River VxWorks | =6.8 | |
Wind River VxWorks | =6.9 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-0716 has a severity rating classified as moderate since it can cause a denial of service but does not allow remote code execution.
To mitigate CVE-2013-0716, upgrade to a newer version of Wind River VxWorks that is not vulnerable, as there are no specific patches available for the affected versions.
CVE-2013-0716 affects Wind River VxWorks versions 5.5 through 6.9.
CVE-2013-0716 allows remote attackers to perform a denial of service attack that crashes the web server daemon via a crafted URI.
Yes, CVE-2013-0716 can be exploited remotely, potentially allowing an attacker to crash the web server if it is exposed to the Internet.