CVE-2010-2968: Windriver Vxworks

High severity, CVSS 7.8. EPSS: 1.5% chance of exploitation in the next 30 days.

The FTP daemon in Wind River VxWorks does not close the TCP connection after a number of failed login attempts, which makes it easier for remote attackers to obtain access via a brute-force attack.

Affected products

• Windriver Vxworks: up to and including 6.8; version 5 only; version 5.5 only; version 6 only; version 6.4 only

Published 2010-08-05. Last modified 2026-06-16.