VULNERABILITY INTELLIGENCE

CVE-2010-2966

CVSS score7.8 NONE
EPSS probability1.55%
CISA KEVNot currently listed
Published2010-08-05
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:N/A:N

Description

The INCLUDE_SECURITY functionality in Wind River VxWorks 6.x, 5.x, and earlier uses the LOGIN_USER_NAME and LOGIN_USER_PASSWORD (aka LOGIN_PASSWORD) parameters to create hardcoded credentials, which makes it easier for remote attackers to obtain access via a (1) telnet, (2) rlogin, or (3) FTP session.

Weakness classification

  • nvd@nist.gov: CWE-255

Primary references