CVE-2020-11440

HIGH EPSS 61.0%

Published Jul 23, 20205y ago · Modified Jun 17, 20262w ago

7.5 CVSS 3.1

High

Published Jul 23, 2020 5y ago

Last Modified Jun 17, 2026 2w ago

Description

httpRpmFs in WebCLI in Wind River VxWorks 5.5 through 7 SR0640 has no check for an escape from the web root.

Base Score

7.5

Exploitability

3.9

Impact

3.6

Vector string

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector Network

Attack Complexity Low

Privileges Required None

User Interaction None

Scope Unchanged

Confidentiality High

Integrity None

Availability None

EPSS Exploit Probability

61.0% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Vendor	Product	Version	Range
windriver	vxworks	*	≥5.5 – <7.0
windriver	vxworks	7.0	any
windriver	vxworks	7.0	any

support2.windriver.com https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2020-11440

Vendor Advisory
windriver.com https://windriver.com

Product

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.