cve/2015/CVE-2015-7599.md

### [CVE-2015-7599](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7599)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

Integer overflow in the _authenticate function in svc_auth.c in Wind River VxWorks 5.5 through 6.9.4.1, when the Remote Procedure Call (RPC) protocol is enabled, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a username and password.

### POC

#### Reference
- https://security.netapp.com/advisory/ntap-20151029-0001/

#### Github
- https://github.com/67626d/ICS
- https://github.com/ARPSyndicate/cvemon
- https://github.com/Xcod3bughunt3r/ISF-ICSSploit
- https://github.com/dark-lbp/isf
- https://github.com/likescam/isf_Industrial-Control-System-Exploitation-Framework-
- https://github.com/snskiff/isf
- https://github.com/xjforfuture/isf