CVE-2025-26500

VxWorks 7 USB Failure

CVSS 4.6 MEDIUMEPSS 0.2%CWE-400

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 4.6EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

21 mar 2025Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

: Uncontrolled Resource Consumption vulnerability in Wind River Systems VxWorks 7 on VxWorks allows Excessive Allocation. Specifically crafted USB packets may lead to the system becoming unavailable This issue affects VxWorks 7: from 22.06 through 24.03.

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Productos afectados

Wind River Systems · VxWorks 7

Referencias

https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2025-26500