Vulnerability record · CVE-2015-7599 · published 7 February 2017

CVE-2015-7599: Windriver vxworks integer overflow vulnerability

Windriver · Vxworks

Integer overflow in the _authenticate function in svc_auth.c in Wind River VxWorks 5.5 through 6.9.4.1, when the Remote Procedure Call (RPC) protocol is enabled, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a username and password.

8.1 CVSS 3.0 High EPSS 5.9% · top 7.0% CWE-190 · Integer overflow

8.1CVSS 3.0 base score, v2 9.3

5.9%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

10References

17 Jun 2026Last modified by NVD

Description

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Vxworks Windriver

References

Link	Tags
http://blogs.windriver.com/wind_river_blog/2015/09/wind-river-vxworks-updateclarification.html	Vendor Advisory
http://www.securityfocus.com/bid/79205	Third Party AdvisoryVDB Entry
https://kb.netapp.com/support/s/article/cve-2015-7599-vxworks-vulnerability-impacting-netapp-e-series-products?language=	Vendor Advisory
https://security.netapp.com/advisory/ntap-20151029-0001/
https://www.syscan360.org/slides/2015_EN_AttackingVxWorksFromstoneagetointerstellar_Eric_Yannick.pdf	Technical DescriptionThird Party Advisory
http://blogs.windriver.com/wind_river_blog/2015/09/wind-river-vxworks-updateclarification.html	Vendor Advisory
http://www.securityfocus.com/bid/79205	Third Party AdvisoryVDB Entry
https://kb.netapp.com/support/s/article/cve-2015-7599-vxworks-vulnerability-impacting-netapp-e-series-products?language=	Vendor Advisory
https://security.netapp.com/advisory/ntap-20151029-0001/
https://www.syscan360.org/slides/2015_EN_AttackingVxWorksFromstoneagetointerstellar_Eric_Yannick.pdf	Technical DescriptionThird Party Advisory

Track CVE-2015-7599 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2013-0714Windriver vxworks improper input validation vulnerabilityIPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote attackers to execute arbitrary code or cause a denial of service (daem…EPSS 6.4%20 Mar 2013 9.8CVE-2020-35198Windriver vxworks integer overflow vulnerabilityAn issue was discovered in Wind River VxWorks 7. The memory allocator has a possible integer overflow in calculating a memory block's size to be allo…EPSS 2.5%12 May 2021 9.8CVE-2021-29998Windriver vxworks out-of-bounds write vulnerabilityAn issue was discovered in Wind River VxWorks before 6.5. There is a possible heap overflow in dhcp client.EPSS 2.4%13 Apr 2021 9.8CVE-2021-29999Windriver vxworks out-of-bounds write vulnerabilityAn issue was discovered in Wind River VxWorks through 6.8. There is a possible stack overflow in dhcp server.EPSS 1.8%13 Apr 2021 9.8CVE-2016-20009Windriver vxworks out-of-bounds write vulnerabilityA DNS client stack-based buffer overflow in ipdnsc_decode_name() affects Wind River VxWorks 6.5 through 7. NOTE: This vulnerability only affects prod…EPSS 1.9%11 Mar 2021 9.8CVE-2019-12262Windriver vxworks vulnerabilityWind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component. IPNET security vulnerability: Handling of unso…EPSS 4.1%14 Aug 2019 9.8CVE-2019-12260Windriver vxworks classic buffer overflow vulnerabilityWind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4). This is an IPNET security vulnerability: TCP Urgent Pointer…EPSS 23%9 Aug 2019 9.8CVE-2019-12261Windriver vxworks classic buffer overflow vulnerabilityWind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4). This is an IPNET security vulnerability: TCP Urg…EPSS 9.0%9 Aug 2019

Source: NIST National Vulnerability Database (record CVE-2015-7599), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.