MiCOM C264 VxWorks Integer Overflow Vulnerability Security Notification

This document details a remotely exploitable integer overflow vulnerability in the VxWorks Operating System affecting the MiCOM C264 product (versions B4 to B10, C1, and D1.1), which could allow attackers to gain backdoor access and execute remote code. It provides CVSS scoring (Base Score: 7.4), affected product versions, and mitigation recommendations including network hardening, physical security, and intrusion detection, while noting that a patch is under development.