|
|
| CVE-ID | ||
|---|---|---|
CVE-2010-2966 |
• Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings
|
|
| Description | ||
| The INCLUDE_SECURITY functionality in Wind River VxWorks 6.x, 5.x, and earlier uses the LOGIN_USER_NAME and LOGIN_USER_PASSWORD (aka LOGIN_PASSWORD) parameters to create hardcoded credentials, which makes it easier for remote attackers to obtain access via a (1) telnet, (2) rlogin, or (3) FTP session. | ||
| References | ||
| Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete. | ||
| Date Entry Created | ||
| 20100804 | Disclaimer: The entry creation date may reflect when the CVE-ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE. | |
| Phase (Legacy) | ||
| Assigned (20100804) | ||
| Votes (Legacy) | ||
| Comments (Legacy) | ||
| Proposed (Legacy) | ||
| N/A | ||
| This is an entry on the CVE list, which standardizes names for security problems. | ||
|
You can also search by reference using the CVE Reference Maps.
|
||
| For More Information: cve@mitre.org | ||
