Uncontrolled Resource Consumption in Wind River Systems VxWorks 7
CVE-2025-26500

4.6MEDIUM

Key Information:

Vendor

Wind River Systems

Status
Vxworks 7
Vendor
CVE Published:
21 March 2025

Badges

👾 Exploit Exists

What is CVE-2025-26500?

The uncontrolled resource consumption vulnerability in Wind River Systems' VxWorks 7 allows for excessive resource allocation, which can result in system unavailability. This issue can be triggered by specifically crafted USB packets, impacting the performance and reliability of systems running VxWorks 7 versions from 22.06 to 24.03.

Affected Version(s)

VxWorks 7 VxWorks 22.06 <= 24.03

References

https://support2.windriver.com/index.php?page=cve&on=view...

CVSS V3.1

Score:
4.6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.