PT-2025-12456 · Wind River Systems · Vxworks 7

Published 2025-03-21 · Updated 2025-03-22 · CVE-2025-26500

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Wind River Systems VxWorks 7 versions 22.06 through 24.03

Description The issue is related to Uncontrolled Resource Consumption, allowing Excessive Allocation in VxWorks 7. Specifically crafted USB packets may lead to the system becoming unavailable.

Recommendations For versions 22.06 through 24.03, consider restricting the handling of USB packets to prevent excessive allocation and potential system unavailability until a patch is available. As a temporary workaround, consider disabling the handling of specifically crafted USB packets to minimize the risk of exploitation.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2025-26500

Affected Products

Vxworks 7

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-26500 · Security Note
• https://twitter.com/CVEnew/status/1903229668884443360 · Twitter Post
• https://t.me/cvenotify/115756 · Telegram Post
• https://t.me/cvedetector/20845 · Telegram Post
• https://t.me/cvetracker/19647 · Telegram Post
• https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2025-26500 · Note