CVE Feed

    Dashboard / CVE / CVE-2019-12255

    CVE-2019-12255

    Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow.

    Published:Aug 9, 2019
    Last Modified:Nov 21, 2024
    EPS:Aug 9, 2019
    EPSS Score:0.80153
    CVSS Score:9.8

    Affected Products

    Vendor
    Belden
    Product
    Garrettcom Magnum Dx940e
    Vendor
    Belden
    Product
    Garrettcom Magnum Dx940e Firmware
    Vendor
    Belden
    Product
    Hirschmann Dragon Mach4000
    Vendor
    Belden
    Product
    Hirschmann Dragon Mach4500
    Vendor
    Belden
    Product
    Hirschmann Eagle20
    Vendor
    Belden
    Product
    Hirschmann Eagle30
    Vendor
    Belden
    Product
    Hirschmann Eagle One
    Vendor
    Belden
    Product
    Hirschmann Ees20
    Vendor
    Belden
    Product
    Hirschmann Ees25
    Vendor
    Belden
    Product
    Hirschmann Eesx20
    Vendor
    Belden
    Product
    Hirschmann Eesx30
    Vendor
    Belden
    Product
    Hirschmann Grs1020
    Vendor
    Belden
    Product
    Hirschmann Grs1030
    Vendor
    Belden
    Product
    Hirschmann Grs1042
    Vendor
    Belden
    Product
    Hirschmann Grs1120
    Vendor
    Belden
    Product
    Hirschmann Grs1130
    Vendor
    Belden
    Product
    Hirschmann Grs1142
    Vendor
    Belden
    Product
    Hirschmann Hios
    Vendor
    Belden
    Product
    Hirschmann Msp30
    Vendor
    Belden
    Product
    Hirschmann Msp32
    Vendor
    Belden
    Product
    Hirschmann Msp40
    Vendor
    Belden
    Product
    Hirschmann Octopus Os3
    Vendor
    Belden
    Product
    Hirschmann Rail Switch Power Lite
    Vendor
    Belden
    Product
    Hirschmann Rail Switch Power Smart
    Vendor
    Belden
    Product
    Hirschmann Red25
    Vendor
    Belden
    Product
    Hirschmann Rsp20
    Vendor
    Belden
    Product
    Hirschmann Rsp25
    Vendor
    Belden
    Product
    Hirschmann Rsp30
    Vendor
    Belden
    Product
    Hirschmann Rsp35
    Vendor
    Belden
    Product
    Hirschmann Rspe30
    Vendor
    Belden
    Product
    Hirschmann Rspe32
    Vendor
    Belden
    Product
    Hirschmann Rspe35
    Vendor
    Belden
    Product
    Hirschmann Rspe37
    Vendor
    Netapp
    Product
    E-series Santricity Os Controller
    Vendor
    Siemens
    Product
    Power Meter 9410
    Vendor
    Siemens
    Product
    Power Meter 9410 Firmware
    Vendor
    Siemens
    Product
    Power Meter 9810
    Vendor
    Siemens
    Product
    Power Meter 9810 Firmware
    Vendor
    Siemens
    Product
    Ruggedcom Win7000
    Vendor
    Siemens
    Product
    Ruggedcom Win7000 Firmware
    Vendor
    Siemens
    Product
    Ruggedcom Win7018
    Vendor
    Siemens
    Product
    Ruggedcom Win7018 Firmware
    Vendor
    Siemens
    Product
    Ruggedcom Win7025
    Vendor
    Siemens
    Product
    Ruggedcom Win7025 Firmware
    Vendor
    Siemens
    Product
    Ruggedcom Win7200
    Vendor
    Siemens
    Product
    Ruggedcom Win7200 Firmware
    Vendor
    Siemens
    Product
    Siprotec 5
    Vendor
    Siemens
    Product
    Siprotec 5 Firmware
    Vendor
    Sonicwall
    Product
    Sonicos
    Vendor
    Windriver
    Product
    Vxworks

    Exploits

    http://packetstormsecurity.com/files/154022/VxWorks-6.8-Integer-Underflow.htmlhttp://packetstormsecurity.com/files/154022/VxWorks-6.8-Integer-Underflow.htmlhttps://www.exploit-db.com/exploits/47233https://github.com/sud0woodo/Urgent11-Suricata-LUA-scripts

    Related CVEs

    CVE-2019-12262 (CVSS 9.8) — Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component. IPNET s…
    CVE-2019-12261 (CVSS 9.8) — Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4). This is a…
    CVE-2019-12260 (CVSS 9.8) — Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4). This is an IPNET sec…
    CVE-2019-12258 (CVSS 7.5) — Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. This is a IPNET security vulnera…
    CVE-2019-12265 (CVSS 5.3) — Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There…
    CVE-2019-12263 (CVSS 8.1) — Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4). There is an IPNET …
    CVE-2019-12259 (CVSS 7.5) — Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. There i…
    CVE-2019-12256 (CVSS 9.8) — Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET security vulnera…
    CVE-2019-12257 (CVSS 8.8) — Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. There is an IPNET secur…
    CVE-2019-12264 (CVSS 7.1) — Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the…

    References

    http://packetstormsecurity.com/files/154022/VxWorks-6.8-Integer-Underflow.html
    https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf
    https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf
    https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf
    https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009
    https://security.netapp.com/advisory/ntap-20190802-0001/
    https://support.f5.com/csp/article/K41190253
    https://support.f5.com/csp/article/K41190253?utm_source=f5support&amp%3Butm_medium=RSS
    https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12255
    https://support2.windriver.com/index.php?page=security-notices
    https://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/
    http://packetstormsecurity.com/files/154022/VxWorks-6.8-Integer-Underflow.html
    https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf
    https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf
    https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf
    https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009
    https://security.netapp.com/advisory/ntap-20190802-0001/
    https://support.f5.com/csp/article/K41190253
    https://support.f5.com/csp/article/K41190253?utm_source=f5support&amp%3Butm_medium=RSS
    https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12255
    https://support2.windriver.com/index.php?page=security-notices
    https://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High