Skip to content

Instantly share code, notes, and snippets.


SwitHak SwitHak

Block or report user

Report or block SwitHak

Hide content and notifications from this user.

Learn more about blocking users

Contact Support about this user’s behavior.

Learn more about reporting abuse

Report abuse
View GitHub Profile
SwitHak / 20190730-TLP-WHITE_URGENT11_VxWorks.MD
Last active Dec 6, 2019
Tracking vendors responses to URGENT/11 VxWorks vulnerabilities (Last updated: 2019-10-29 0709 UTC)
View 20190730-TLP-WHITE_URGENT11_VxWorks.MD

Advisory (URGENT/11)

UPDATE (2019-10-02 1241 UTC)


Armis released new information about the vulnerabilities scope. The vulnerabilities impact more RTOS than expected.

IP Stacks backstory

  • Some of the vulnerabilities discovered by Armis doesn't resides in VxWorks RTOS but in one part of it, the IP stack. This IP stack named IPNET stack comes from Interpeak AB, a company acquired by Wind River the editor of VxWorks RTOS, the 20th March 2006.
  • Before been acquired by Wind River, the Interpeak AB company sold IP stacks to several customers of them. Interpeak AB sold 2 major IP stacks named IPNET & IPLITE, IPLITE is a light version of IPNET.
SwitHak / 20190618-TLP-WHITE-TCPSACK.MD
Last active Nov 7, 2019
Tracking vendors responses to TCP SACK vulnerabilities
You can’t perform that action at this time.