CVE-2015-7599

Integer overflow in the _authenticate function in svc_auth.c in Wind River VxWorks 5.5 through 6.9.4.1, when the Remote Procedure Call (RPC) protocol is enabled, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a username and password.

• CWE-190

• http://blogs.windriver.com/wind_river_blog/2015/09/wind-river-vxworks-updateclarification.htmlVendor Advisory
• http://www.securityfocus.com/bid/79205Third Party Advisory, VDB Entry
• https://kb.netapp.com/support/s/article/cve-2015-7599-vxworks-vulnerability-impacting-netapp-e-series-products?language=en_USVendor Advisory
• https://security.netapp.com/advisory/ntap-20151029-0001/
• https://www.syscan360.org/slides/2015_EN_AttackingVxWorksFromstoneagetointerstellar_Eric_Yannick.pdfTechnical Description, Third Party Advisory
• http://blogs.windriver.com/wind_river_blog/2015/09/wind-river-vxworks-updateclarification.htmlVendor Advisory
• http://www.securityfocus.com/bid/79205Third Party Advisory, VDB Entry
• https://kb.netapp.com/support/s/article/cve-2015-7599-vxworks-vulnerability-impacting-netapp-e-series-products?language=en_USVendor Advisory
• https://security.netapp.com/advisory/ntap-20151029-0001/
• https://www.syscan360.org/slides/2015_EN_AttackingVxWorksFromstoneagetointerstellar_Eric_Yannick.pdfTechnical Description, Third Party Advisory

Published

Feb 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-7593Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-7594Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-7595Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-7596SafeNet Authentication Service End User Software Tools for W…
• CVE-2015-7597SafeNet Authentication Service IIS Agent uses a weak ACL for…
• CVE-2015-7598SafeNet Authentication Service TokenValidator Proxy Agent us…
• CVE-2015-7600Cisco VPN Client 5.x through 5.0.07.0440 uses weak permissio…
• CVE-2015-7601Directory traversal vulnerability in PCMan's FTP Server 2.0.…
• CVE-2015-7602Directory traversal vulnerability in BisonWare BisonFTP 3.5 …
• CVE-2015-7603Directory traversal vulnerability in Konica Minolta FTP Util…
• CVE-2015-7604Cross-site scripting (XSS) vulnerability in Splunk Web in Sp…
• CVE-2015-7609Synacor Zimbra Mail Client 8.6 before 8.6.0 Patch 5 has XSS …