CVE-2022-38767

An issue was discovered in Wind River VxWorks 6.9 and 7, that allows a specifically crafted packet sent by a Radius server, may cause Denial of Service during the IP Radius access procedure.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
windrivervxworks
6.9 ≤
𝑥
< 6.9.4.12
windrivervxworks
6.9.4.12
windrivervxworks
6.9.4.12:rolling_cumulative_patch_layer1
windrivervxworks
6.9.4.12:rolling_cumulative_patch_layer2
windrivervxworks
6.9.4.12:rolling_cumulative_patch_layer3
windrivervxworks
6.9.4.12:rolling_cumulative_patch_layer4
windrivervxworks
6.9.4.12:rolling_cumulative_patch_layer5
windrivervxworks
7.0
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
SiemensSIPROTEC 5 6MD85 \(CP300\)
V7.80 ≤
𝑥
< V9.30
ADP
SiemensSIPROTEC 5 6MD86 \(CP300\)
V7.80 ≤
𝑥
< V9.30
ADP
SiemensSIPROTEC 5 6MD89 \(CP300\)
V7.80 ≤
𝑥
< V9.64
ADP
SiemensSIPROTEC 5 6MU85 \(CP300\)
V7.90 ≤
𝑥
< V9.30
ADP
SiemensSIPROTEC 5 7KE85 \(CP300\)
V7.80 ≤
𝑥
< V9.30
ADP
SiemensSIPROTEC 5 7SA86 \(CP300\)
V7.80 ≤
𝑥
< V9.30
ADP
SiemensSIPROTEC 5 7SA87 \(CP300\)
V7.80 ≤
𝑥
< V9.30
ADP
SiemensSIPROTEC 5 7SD86 \(CP300\)
V7.80 ≤
𝑥
< V9.30
ADP
SiemensSIPROTEC 5 7SD87 \(CP300\)
V7.80 ≤
𝑥
< V9.30
ADP
SiemensSIPROTEC 5 7SJ85 \(CP300\)
V7.80 ≤
𝑥
< V9.30
ADP
SiemensSIPROTEC 5 7SJ86 \(CP300\)
V7.80 ≤
𝑥
< V9.30
ADP
SiemensSIPROTEC 5 7SK85 \(CP300\)
V7.80 ≤
𝑥
< V9.30
ADP
SiemensSIPROTEC 5 7SL86 \(CP300\)
V7.80 ≤
𝑥
< V9.30
ADP
SiemensSIPROTEC 5 7SL87 \(CP300\)
V7.80 ≤
𝑥
< V9.30
ADP
SiemensSIPROTEC 5 7SS85 \(CP300\)
V7.80 ≤
𝑥
< V9.30
ADP
SiemensSIPROTEC 5 7ST85 \(CP300\)
V8.81 ≤
𝑥
< V9.30
ADP
SiemensSIPROTEC 5 7ST86 \(CP300\)
V9.20 ≤
𝑥
< V9.30
ADP
SiemensSIPROTEC 5 7SX85 \(CP300\)
V8.30 ≤
𝑥
< V9.30
ADP
SiemensSIPROTEC 5 7UM85 \(CP300\)
V7.80 ≤
𝑥
< V9.30
ADP
SiemensSIPROTEC 5 7UT85 \(CP300\)
V7.80 ≤
𝑥
< V9.30
ADP
SiemensSIPROTEC 5 7UT86 \(CP300\)
V7.80 ≤
𝑥
< V9.30
ADP
SiemensSIPROTEC 5 7UT87 \(CP300\)
V7.80 ≤
𝑥
< V9.30
ADP
SiemensSIPROTEC 5 7VE85 \(CP300\)
V7.80 ≤
𝑥
< V9.30
ADP
SiemensSIPROTEC 5 7VK87 \(CP300\)
V7.80 ≤
𝑥
< V9.30
ADP
SiemensSIPROTEC 5 Communication Module ETH-BA-2EL \(Rev.1\)
V7.80 ≤
𝑥
< V9.30
ADP
SiemensSIPROTEC 5 Communication Module ETH-BB-2FO \(Rev. 1\)
V7.80 ≤
𝑥
< V9.30
ADP
SiemensSIPROTEC 5 Communication Module ETH-BD-2FO
V7.80 ≤
𝑥
< V9.30
ADP
SiemensSIPROTEC 5 Compact 7SX800 \(CP050\)
V8.70 ≤
𝑥
< V9.30
ADP
References
https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2022-38767
https://windriver.com
https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2022-38767
https://windriver.com
https://cert-portal.siemens.com/productcert/html/ssa-726834.html