CVE-2010-2965

The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and…

Critical · published August 4, 2010

CVSS v3.1
9.8
EPSS
47%
Percentile
98.8
In the wild
Unconfirmed
What it is

🚨 An unguarded debug service on UDP port 17185 can let remote attackers poke around in your system's memory like it's an open buffet! 🔥 Think of this vulnerability as a maintenance worker with a master key who can access any room in a secure building without permission. They can not only snoop around but even rearrange furniture and turn off alarms without anyone noticing! An attacker could read or modify critical memory locations, execute function calls, or take control of tasks, which could lead to system instability or worse, total compromise of the device. This is absolutely devastating for any operations relying on the affected systems, as it opens the door for unauthorized access and manipulation of essential functions.

Put simply

Think of this vulnerability as a maintenance worker with a master key who can access any room in a secure building without permission. They can not only snoop around but even rearrange furniture and turn off alarms without anyone noticing! This vulnerability in the WDB target agent debug service of Wind River VxWorks allows attackers to exploit open UDP port 17185, enabling arbitrary memory access and manipulation without proper authentication.

What to do

An attacker could read or modify critical memory locations, execute function calls, or take control of tasks, which could lead to system instability or worse, total compromise of the device. This is absolutely devastating for any operations relying on the affected systems, as it opens the door for unauthorized access and manipulation of essential functions. It's time to take action! First, restrict access to UDP port 17185 from external networks. Second, consider disabling the debug service when it's not in use and update to the latest firmware versions that address this vulnerability. Ensure regular audits and monitoring for any unusual activity. You’ve got this! By taking these steps, you can significantly enhance your system's security and get back to being the hero who protects the network! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.47371 · 98.8th percentile
Published
2010-08-04T21:00Z
EPSS history
Timeline
  • 29 SEP 03:03Z
    EPSS moved 58% → 47%
    epss
  • 04 AUG 21:00Z
    The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and…
    cvelistv5