CVE Feed

    Dashboard / CVE / CVE-2019-12262

    CVE-2019-12262

    Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component. IPNET security vulnerability: Handling of unsolicited Reverse ARP replies (Logical Flaw).

    Published:Aug 14, 2019
    Last Modified:Nov 21, 2024
    EPS:Aug 14, 2019
    EPSS Score:0.00421
    CVSS Score:9.8

    Affected Products

    Vendor
    Belden
    Product
    Garrettcom Magnum Dx940e
    Vendor
    Belden
    Product
    Garrettcom Magnum Dx940e Firmware
    Vendor
    Belden
    Product
    Hirschmann Dragon Mach4000
    Vendor
    Belden
    Product
    Hirschmann Dragon Mach4500
    Vendor
    Belden
    Product
    Hirschmann Eagle20
    Vendor
    Belden
    Product
    Hirschmann Eagle30
    Vendor
    Belden
    Product
    Hirschmann Eagle One
    Vendor
    Belden
    Product
    Hirschmann Ees20
    Vendor
    Belden
    Product
    Hirschmann Ees25
    Vendor
    Belden
    Product
    Hirschmann Eesx20
    Vendor
    Belden
    Product
    Hirschmann Eesx30
    Vendor
    Belden
    Product
    Hirschmann Grs1020
    Vendor
    Belden
    Product
    Hirschmann Grs1030
    Vendor
    Belden
    Product
    Hirschmann Grs1042
    Vendor
    Belden
    Product
    Hirschmann Grs1120
    Vendor
    Belden
    Product
    Hirschmann Grs1130
    Vendor
    Belden
    Product
    Hirschmann Grs1142
    Vendor
    Belden
    Product
    Hirschmann Hios
    Vendor
    Belden
    Product
    Hirschmann Msp30
    Vendor
    Belden
    Product
    Hirschmann Msp32
    Vendor
    Belden
    Product
    Hirschmann Msp40
    Vendor
    Belden
    Product
    Hirschmann Octopus Os3
    Vendor
    Belden
    Product
    Hirschmann Rail Switch Power Lite
    Vendor
    Belden
    Product
    Hirschmann Rail Switch Power Smart
    Vendor
    Belden
    Product
    Hirschmann Red25
    Vendor
    Belden
    Product
    Hirschmann Rsp20
    Vendor
    Belden
    Product
    Hirschmann Rsp25
    Vendor
    Belden
    Product
    Hirschmann Rsp30
    Vendor
    Belden
    Product
    Hirschmann Rsp35
    Vendor
    Belden
    Product
    Hirschmann Rspe30
    Vendor
    Belden
    Product
    Hirschmann Rspe32
    Vendor
    Belden
    Product
    Hirschmann Rspe35
    Vendor
    Belden
    Product
    Hirschmann Rspe37
    Vendor
    Siemens
    Product
    Ruggedcom Win7000
    Vendor
    Siemens
    Product
    Ruggedcom Win7000 Firmware
    Vendor
    Siemens
    Product
    Ruggedcom Win7018
    Vendor
    Siemens
    Product
    Ruggedcom Win7018 Firmware
    Vendor
    Siemens
    Product
    Ruggedcom Win7025
    Vendor
    Siemens
    Product
    Ruggedcom Win7025 Firmware
    Vendor
    Siemens
    Product
    Ruggedcom Win7200
    Vendor
    Siemens
    Product
    Ruggedcom Win7200 Firmware
    Vendor
    Windriver
    Product
    Vxworks

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2019-12261 (CVSS 9.8) — Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4). This is a…
    CVE-2019-12260 (CVSS 9.8) — Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4). This is an IPNET sec…
    CVE-2019-12258 (CVSS 7.5) — Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. This is a IPNET security vulnera…
    CVE-2019-12255 (CVSS 9.8) — Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnera…
    CVE-2019-12265 (CVSS 5.3) — Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There…
    CVE-2019-12263 (CVSS 8.1) — Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4). There is an IPNET …
    CVE-2019-12259 (CVSS 7.5) — Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. There i…
    CVE-2019-12256 (CVSS 9.8) — Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET security vulnera…
    CVE-2019-12257 (CVSS 8.8) — Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. There is an IPNET secur…
    CVE-2019-12264 (CVSS 7.1) — Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High