IM
IronMonkey Threat Research

CVE-2019-12256 CRITICAL

Published: 2019-08-09 | Last Modified: 2026-06-17 | Status: Modified

Description

Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET security vulnerability: Stack overflow in the parsing of IPv4 packets’ IP options.

Additional Descriptions (1)

Wind River VxWorks 6.9 y vx7 tiene un desbordamiento de búfer en el componente IPv4. Existe una vulnerabilidad de seguridad IPNET: desbordamiento de pila en el análisis de las opciones IP de los paquetes IPv4.

CVSS Metrics

Base Score: 9.8 (CRITICAL)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactHIGH
Integrity ImpactHIGH
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 5.9

Base Score: 7.5 (HIGH)

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access VectorNETWORK
Access ComplexityLOW
AuthenticationNONE
Confidentiality ImpactPARTIAL
Integrity ImpactPARTIAL
Availability ImpactPARTIAL

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 6.4

Weaknesses

Source Type Description
[email protected] Primary
en CWE-120

Affected Products

Vendor Product Version Update Type
windriver vxworks * <built-in method update of dict object at 0x72a9b0db79c0> Operating System
netapp e-series_santricity_os_controller * <built-in method update of dict object at 0x72a9cc645b80> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9b0d7a0c0> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9ccfc4cc0> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9b0db6a00> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9b0db6200> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9cd07b2c0> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9cc5c1380> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9b0a48800> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9b0d2c980> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9a31fc700> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9b0796a40> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9ccfc4440> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9a31ff380> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9b0b74380> Operating System
sonicwall sonicos 6.2.7.0 <built-in method update of dict object at 0x72a9ccfc44c0> Operating System
sonicwall sonicos 6.2.7.1 <built-in method update of dict object at 0x72a9b0d78a40> Operating System
sonicwall sonicos 6.2.7.7 <built-in method update of dict object at 0x72a9b0d79580> Operating System
siemens siprotec_5_firmware * <built-in method update of dict object at 0x72a9b0a488c0> Operating System
siemens siprotec_5_firmware * <built-in method update of dict object at 0x72a9b0b076c0> Operating System
siemens power_meter_9410_firmware * <built-in method update of dict object at 0x72a99a767c00> Operating System
siemens power_meter_9810_firmware * <built-in method update of dict object at 0x72a9b0b755c0> Operating System
siemens ruggedcom_win7000_firmware * <built-in method update of dict object at 0x72a9b0b76300> Operating System
siemens ruggedcom_win7018_firmware * <built-in method update of dict object at 0x72a9b0b74b40> Operating System
siemens ruggedcom_win7025_firmware * <built-in method update of dict object at 0x72a9b0a78e80> Operating System
siemens ruggedcom_win7200_firmware * <built-in method update of dict object at 0x72a9cc8336c0> Operating System
belden hirschmann_hios * <built-in method update of dict object at 0x72a9b0b74580> Operating System
belden hirschmann_hios * <built-in method update of dict object at 0x72a9cc86eb40> Operating System
belden hirschmann_hios * <built-in method update of dict object at 0x72a9b0797c00> Operating System
belden hirschmann_hios * <built-in method update of dict object at 0x72a9b0d2fbc0> Operating System
belden garrettcom_magnum_dx940e_firmware * <built-in method update of dict object at 0x72a9b0d2ed80> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:windriver:vxworks:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:6.2.7.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:6.2.7.1:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:6.2.7.7:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:siemens:siprotec_5_firmware:*:*:*:*:*:*:*:cp200

Operator: OR

Vulnerable CPE
No cpe:2.3:h:siemens:siprotec_5:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:siemens:siprotec_5_firmware:*:*:*:*:*:*:*:cp300

Operator: OR

Vulnerable CPE
No cpe:2.3:h:siemens:siprotec_5:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:siemens:power_meter_9410_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:siemens:power_meter_9410:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:siemens:power_meter_9810_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:siemens:power_meter_9810:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:siemens:ruggedcom_win7000_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:siemens:ruggedcom_win7000:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:siemens:ruggedcom_win7018_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:siemens:ruggedcom_win7018:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:siemens:ruggedcom_win7025_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:siemens:ruggedcom_win7025:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:siemens:ruggedcom_win7200_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:siemens:ruggedcom_win7200:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:belden:hirschmann_hios:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:belden:hirschmann_ees20:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_ees25:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_eesx20:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_eesx30:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_grs1020:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_grs1030:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_grs1042:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_grs1120:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_grs1130:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_grs1142:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_msp30:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_msp32:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_rail_switch_power_lite:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_rail_switch_power_smart:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_red25:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_rsp20:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_rsp25:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_rsp30:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_rsp35:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_rspe30:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_rspe32:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_rspe35:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_rspe37:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:belden:hirschmann_hios:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:belden:hirschmann_msp40:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_octopus_os3:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:belden:hirschmann_hios:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:belden:hirschmann_dragon_mach4000:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_dragon_mach4500:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:belden:hirschmann_hios:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:belden:hirschmann_eagle_one:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_eagle20:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_eagle30:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:belden:garrettcom_magnum_dx940e_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:belden:garrettcom_magnum_dx940e:-:*:*:*:*:*:*:*

References

Notification
Message here