Back to Database
Status published
Critical
CVE-2021-29998
An issue was discovered in Wind River VxWorks before 6.5....
Vulnerability Description
An issue was discovered in Wind River VxWorks before 6.5. There is a possible heap overflow in dhcp client.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-29998
Credits & Attribution
No credits recorded in the NVD database.
References
More from windriver
View All →CVE-2022-38767
An issue was discovered in Wind River VxWorks 6.9 and...
Unknown
0
CVE-2022-23937
In Wind River VxWorks 6.9 and 7, a specific crafted...
Medium
5.3
CVE-2021-43268
An issue was discovered in VxWorks 6.9 through 7. In...
Medium
6.5
CVE-2021-29999
An issue was discovered in Wind River VxWorks through 6.8....
Critical
9.8
CVE-2021-29997
An issue was discovered in Wind River VxWorks 7 before...
Medium
5.3
Affected Vendor
windriver
View all reports →Affected Software
vxworks, ruggedcom win subscriber station firmware, scalance x200-4 p irt firmware, scalance x201-3p irt firmware, scalance x201-3p irt pro firmware, scalance x202-2 irt firmware, scalance x202-2p irt firmware, scalance x202-2p irt pro firmware, scalance x204 irt firmware, scalance x204 irt pro firmware, scalance x204-2 firmware, scalance x204-2fm firmware, scalance x204-2ld firmware, scalance x204-2ld ts firmware, scalance x204-2ts firmware, scalance x206-1 firmware, scalance x206-1ld firmware, scalance x208 firmware, scalance x208 pro firmware, scalance x212-2 firmware, scalance x212-2ld firmware, scalance x216 firmware, scalance x224 firmware, scalance x300 firmware, scalance x408 firmware, scalance xf201-3p irt firmware, scalance xf202-2p irt firmware, scalance xf204 firmware, scalance xf204 irt firmware, scalance xf204-2 firmware, scalance xf204-2ba irt firmware, scalance xf206-1 firmware, scalance xf208 firmware, simatic rf 181 eip firmware, simatic rf 182c firmware, sinamics perfect harmony gh180 firmware
Vulnerable Versions:
0, 2015
Timeline
Official Publish:
April 13th, 2021
Last Modified:
August 3rd, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.