Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2010-2965

61
FAUCET Score

CVE-2010-2965 is a critical vulnerability affecting the WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, including specific Rockwell Automation 1756-ENBT series A firmware versions. This flaw allows unauthenticated remote attackers to read or modify arbitrary memory, execute arbitrary code via function calls, and manage tasks. With a CVSS score of 10.0, it presents a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While no active exploitation, public exploit code, or significant community discussion has been observed, its high EPSS and FAUCET Risk Score indicate a substantial potential threat.

Impacted Technologies

VendorProductVersion(s)CPE
3.2.6CPE matchmatch criteria
cpe:2.3:o:rockwellautomation:1756-enbt\/a_firmware:3.2.6:*:*:*:*:*:*:*
3.6.1CPE matchmatch criteria
cpe:2.3:o:rockwellautomation:1756-enbt\/a_firmware:3.6.1:*:*:*:*:*:*:*
<= 6.9.4.12CPE matchmatch criteria
cpe:2.3:o:windriver:vxworks:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

10.0HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C

Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Exploitability Score
10.0
Impact Score
10.0
CvssVersion
2.0

Exploit Intelligence

EPSS Score
57.82%
Probability of exploitation in next 30 days
EPSS Percentile
99.0%
Percentile rank of EPSS score among Peer Group
As of 2026-07-24
Model: v2026.06.15
This CVE's current EPSS score of 0.5782 is in the 97th percentile among its peer group of 36,829 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Remediation records are not available for this CVE.

References

seclists.org / fulldisclosure/2025/Jan/10
blog.metasploit.com / 2010/08/vxworks-vulnerabilities.html
Not Applicable
rockwellautomation.custhelp.com / cgi-bin/rockwellautomation.cfg/php/enduser/std_adp.php
Permissions Required
support.windriver.com / olsPortal/faces/maintenance/downloadDetails.jspx
Permissions Required
kb.cert.org / vuls/id/362332
Third Party AdvisoryUS Government Resource
kb.cert.org / vuls/id/MAPG-86EPFA
Third Party AdvisoryUS Government Resource
kb.cert.org / vuls/id/MAPG-86FPQL
Third Party AdvisoryUS Government Resource