Rtos

Vendor:

First CVE: Nov 12, 2002 · Active for 23 years

19

Total CVEs

More Total CVEs than 93% of tracked products

4.8

Avg CVEs / Year

Higher CVE frequency than 87% of tracked products

5.6

Avg CVSS

Higher Avg CVSS than 16% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Rtos over time

Volume of CVEsAvg CVSS Base Score

First CVE

Nov 12, 2002

23 years ago

Most Recent CVE

Feb 9, 2006

7,472 days ago

CVE Severity & Scoring

Rtos19 CVEs

21%

37%

42%

All CVEs352,719 CVEs

45%

40%

11%

LowMediumHigh

Attack Vector

Local0 (0.0%)

Network0 (0.0%)

Unknown19 (100.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low0 (0.0%)

High0 (0.0%)

Unknown19 (100.0%)

User Interaction

None0 (0.0%)

Unknown19 (100.0%)

Required0 (0.0%)

Privileges Required

Low0 (0.0%)

High0 (0.0%)

None0 (0.0%)

Unknown19 (100.0%)

Top CVEs

Signals from CVEs in this product scope (19 CVEs).

19 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2006-0623HIGH QNX Neutrino RTOS 6.3.0 ships /etc/rc.d/rc.local with world-writable permissions, which allows local users to modify the file and execute arbitrary code at system startup.	Feb 9, 2006	7.2	27	NO	YES
CVE-2005-1528HIGH Untrusted search path vulnerability in the crttrap command in QNX Neutrino RTOS 6.2.1 allows local users to load arbitrary libraries via a LD_LIBRARY_PATH environment variable that	Dec 31, 2005	7.2	27	NO	YES
CVE-2004-1390HIGH Multiple buffer overflows in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allow remote attackers to execute arbitrary code via a long argument to the (1) -F, (2) name, (3) en, (4) upsc	Dec 31, 2004	10.0	27	NO	NO
CVE-2002-2040HIGH The (1) phrafx and (2) phgrafx-startup programs in QNX realtime operating system (RTOS) 4.25 and 6.1.0 do not properly drop privileges before executing the system command, which al	Dec 31, 2002	7.2	27	NO	YES
CVE-2002-2041HIGH Multiple buffer overflows in realtime operating system (RTOS) 6.1.0 allows local users to execute arbitrary code via (1) a long ABLANG environment variable in phlocale or (2) a lon	Dec 31, 2002	7.2	27	NO	YES
CVE-2002-2042HIGH ptrace in the QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows programs to attach to privileged processes, which could allow local users to execute arbitrary code by modi	Dec 31, 2002	7.2	27	NO	YES
CVE-2002-1239HIGH QNX Neutrino RTOS 6.2.0 uses the PATH environment variable to find and execute the cp program while operating at raised privileges, which allows local users to gain privileges by m	Nov 12, 2002	7.2	27	NO	YES
CVE-2006-0620MEDIUM Race condition in phfont in QNX Neutrino RTOS 6.2.1 allows local users to execute arbitrary code via unspecified manipulations of the PHFONT and PHOTON2_PATH environment variables.	Feb 9, 2006	6.2	25	NO	YES
CVE-2005-3928MEDIUM Buffer overflow in phgrafx in QNX 6.2.1 and 6.3.0 allows local users to execute arbitrary code via a long command line argument.	Nov 30, 2005	4.6	21	NO	YES
CVE-2006-0621HIGH Multiple buffer overflows in QNX Neutrino RTOS 6.2.0 allow local users to execute arbitrary code via a long first argument to the (1) su or (2) passwd commands.	Feb 9, 2006	7.2	18	NO	NO

View all 19 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (19 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

11 CVEs

57.9% of CVEs· 93rd percentile

Social Chatter

Signals from CVEs in this product scope (19 CVEs).

Media Mentions

Signals from CVEs in this product scope (19 CVEs).

Top CNAs Publishing CVEs For Rtos

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
6.3.0	6	4.7	0.7%	3
6.2a	1	6.9	0.3%	0
6.2.1b	2	5.4	0.7%	1
6.2.1a	2	5.4	0.7%	1
6.2.1	3	6.0	0.9%	3
6.2.0a	1	10.0	7.3%	0
6.2.0	4	7.3	2.3%	1
6.2	1	6.9	0.3%	0
6.1.0a	1	4.6	0.6%	0
6.1.0	8	5.3	1.7%	6
4.25	5	6.2	2.2%	3
2.4	1	10.0	7.3%	0