CVE-2022-38767

Published: Nov 25, 2022Modified: Apr 14, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

An issue was discovered in Wind River VxWorks 6.9 and 7, that allows a specifically crafted packet sent by a Radius server, may cause Denial of Service during the IP Radius access procedure.

Affected (8)

Products: Windriver: Vxworks

Windriver

1 product

Vxworks

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Windriver Vxworks	From 6.9 to 6.9.4.12
Windriver Vxworks	Version 6.9.4.12
Windriver Vxworks	Version 6.9.4.12 rolling_cumulative_patch_layer1
Windriver Vxworks	Version 6.9.4.12 rolling_cumulative_patch_layer2
Windriver Vxworks	Version 6.9.4.12 rolling_cumulative_patch_layer3
Windriver Vxworks	Version 6.9.4.12 rolling_cumulative_patch_layer4
Windriver Vxworks	Version 6.9.4.12 rolling_cumulative_patch_layer5
Windriver Vxworks	Version 7.0

References (5)

https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2022-38767

Source: cve@mitre.org

Vendor Advisory

https://windriver.com

Source: cve@mitre.org

Vendor Advisory

https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2022-38767

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://windriver.com

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://cert-portal.siemens.com/productcert/html/ssa-726834.html

Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

Timeline

No history available yet.