Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Wind River VxWorks before 5.5.1, 6.5.x through 6.7.x before 6.7.1.1, 6.8.x before 6.8.3, 6.9.x before 6.9.4.4, and 7.x before 7 ipnet_coreip 1.2.2.0, as used on Schneider Electric SAGE RTU devices before J2 and other devices, does not properly generate TCP initial sequence number (ISN) values, which makes it easier for remote attackers to spoof TCP sessions by predicting an ISN value.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Wind River VxWorks 安全绕过漏洞
Vulnerability Description
Schneider Electric SAGE RTU是法国施耐德电气（Schneider Electric）公司的系列工业数据通信设备。Wind River VxWorks是美国风河（Wind River）公司开发的一套物联网嵌入式实时操作系统（RTOS）。 Schneider Electric SAGE RTU设备J2之前版本中使用的Wind River VxWorks中存在安全漏洞，该漏洞源于程序没有正确生成TCP初始序列号（ISN）。远程攻击者可通过预测ISN值利用该漏洞伪造TCP会话。以下版本受
CVSS Information
N/A
Vulnerability Type
N/A