CVE-2022-38767

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

An issue was discovered in Wind River VxWorks 6.9 and 7, that allows a specifically crafted packet sent by a Radius server, may cause Denial of Service during the IP Radius access procedure.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected software

Vendor	Product	Versions
n/a	n/a	n/a
Siemens	SIPROTEC 5 6MD85 (CP300)	>= V7.80, < V9.30
Siemens	SIPROTEC 5 6MD86 (CP300)	>= V7.80, < V9.30
Siemens	SIPROTEC 5 6MD89 (CP300)	>= V7.80, < V9.64
Siemens	SIPROTEC 5 6MU85 (CP300)	>= V7.90, < V9.30
Siemens	SIPROTEC 5 7KE85 (CP300)	>= V7.80, < V9.30
Siemens	SIPROTEC 5 7SA86 (CP300)	>= V7.80, < V9.30
Siemens	SIPROTEC 5 7SA87 (CP300)	>= V7.80, < V9.30
Siemens	SIPROTEC 5 7SD86 (CP300)	>= V7.80, < V9.30
Siemens	SIPROTEC 5 7SD87 (CP300)	>= V7.80, < V9.30
Siemens	SIPROTEC 5 7SJ85 (CP300)	>= V7.80, < V9.30
Siemens	SIPROTEC 5 7SJ86 (CP300)	>= V7.80, < V9.30
Siemens	SIPROTEC 5 7SK85 (CP300)	>= V7.80, < V9.30
Siemens	SIPROTEC 5 7SL86 (CP300)	>= V7.80, < V9.30
Siemens	SIPROTEC 5 7SL87 (CP300)	>= V7.80, < V9.30
Siemens	SIPROTEC 5 7SS85 (CP300)	>= V7.80, < V9.30
Siemens	SIPROTEC 5 7ST85 (CP300)	>= V8.81, < V9.30
Siemens	SIPROTEC 5 7ST86 (CP300)	>= V9.20, < V9.30
Siemens	SIPROTEC 5 7SX85 (CP300)	>= V8.30, < V9.30
Siemens	SIPROTEC 5 7UM85 (CP300)	>= V7.80, < V9.30
Siemens	SIPROTEC 5 7UT85 (CP300)	>= V7.80, < V9.30
Siemens	SIPROTEC 5 7UT86 (CP300)	>= V7.80, < V9.30
Siemens	SIPROTEC 5 7UT87 (CP300)	>= V7.80, < V9.30
Siemens	SIPROTEC 5 7VE85 (CP300)	>= V7.80, < V9.30
Siemens	SIPROTEC 5 7VK87 (CP300)	>= V7.80, < V9.30
Siemens	SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1)	>= V7.80, < V9.30
Siemens	SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1)	>= V7.80, < V9.30
Siemens	SIPROTEC 5 Communication Module ETH-BD-2FO	>= V7.80, < V9.30
Siemens	SIPROTEC 5 Compact 7SX800 (CP050)	>= V8.70, < V9.30

References

https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2022-38767Vendor Advisory
https://windriver.comVendor Advisory
https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2022-38767Vendor Advisory
https://windriver.comVendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-726834.html

Timeline

Published: Nov 25, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-387689.8The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to bypass authorization.CVE-2022-387697.5The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to fetch cleartext passwords upon a su CVE-2022-38775.4A vulnerability, which was classified as problematic, was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. A CVE-2022-387705.3The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to fetch other users' data upon a succ CVE-2022-387719.8The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to send SCRIPT tags as injected input CVE-2022-387728.8Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 125658, 1260 CVE-2022-387736.8Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not b CVE-2022-387747.8An issue was discovered in the quarantine feature of Elastic Endpoint Security and Elastic Endgame for Windows, which could allow unprivileg CVE-2022-387757.8An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate th CVE-2022-387777.8An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate th CVE-2022-387786.5A flaw (CVE-2022-38900) was discovered in one of Kibana’s third party dependencies, that could allow an authenticated user to perform a requ CVE-2022-387796.1An open redirect issue was discovered in Kibana that could lead to a user being redirected to an arbitrary website if they use a maliciously