CVE-2010-2965: The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Aut...

Security readout for executives and security teams

This CVE concerns a debug service left reachable on Wind River VxWorks devices. If exposed, an attacker could directly read or change device memory and control tasks. For industrial equipment, that can affect availability and process integrity. The supplied sources do not show CISA KEV listing or active exploitation. Highest concern is legacy embedded or OT assets running VxWorks with WDB enabled and UDP 17185 reachable. Exposure is likely asset-specific because the bundle lists examples, not a complete affected product inventory. Prioritize discovery and isolation over broad emergency patching. This is old but potentially severe for reachable OT devices because compromise could affect control-system reliability and integrity. Mitigation focus: Check Wind River and device-vendor guidance for supported fixes.; Disable the WDB target agent where vendor-supported.; Block or tightly restrict UDP 17185 to trusted management paths..

Prepared

Jun 28, 2026, 02:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.