CVE-2010-2967: Windriver Vxworks

High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days.

The loginDefaultEncrypt algorithm in loginLib in Wind River VxWorks before 6.9 does not properly support a large set of distinct possible passwords, which makes it easier for remote attackers to obtain access via a (1) telnet, (2) rlogin, or (3) FTP session.

Affected products

• Windriver Vxworks: up to and including 6.8; version 5 only; version 5.5 only; version 6 only; version 6.4 only

Published 2010-08-05. Last modified 2026-06-16.