Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4). This is an IPNET security vulnerability: TCP Urgent Pointer state confusion caused by a malformed TCP AO option.
Wind River VxWorks versiones 6.9 y vx7, presenta un Desbordamiento de Búfer en el componente TCP (problema 2 de 4). Se trata de una vulnerabilidad de seguridad de IPNET: Confusión de estado de TCP Urgent Pointer causada por una opción AO de TCP malformada.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | NONE |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | HIGH |
| Availability Impact | HIGH |
AV:N/AC:L/Au:N/C:P/I:P/A:P
| Access Vector | NETWORK |
|---|---|
| Access Complexity | LOW |
| Authentication | NONE |
| Confidentiality Impact | PARTIAL |
| Integrity Impact | PARTIAL |
| Availability Impact | PARTIAL |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-120
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| windriver | vxworks | * | <built-in method update of dict object at 0x72a99a6402c0> | Operating System |
| windriver | vxworks | 7.0 | <built-in method update of dict object at 0x72a99a7f1780> | Operating System |
| sonicwall | sonicos | * | <built-in method update of dict object at 0x72a99a6418c0> | Operating System |
| sonicwall | sonicos | * | <built-in method update of dict object at 0x72a9cdf033c0> | Operating System |
| sonicwall | sonicos | * | <built-in method update of dict object at 0x72a99a643180> | Operating System |
| sonicwall | sonicos | * | <built-in method update of dict object at 0x72a99a640980> | Operating System |
| sonicwall | sonicos | * | <built-in method update of dict object at 0x72a99a642580> | Operating System |
| sonicwall | sonicos | * | <built-in method update of dict object at 0x72a99a7f2900> | Operating System |
| sonicwall | sonicos | * | <built-in method update of dict object at 0x72a9b0b4a6c0> | Operating System |
| sonicwall | sonicos | * | <built-in method update of dict object at 0x72a99a642f40> | Operating System |
| sonicwall | sonicos | * | <built-in method update of dict object at 0x72a99a7f3500> | Operating System |
| sonicwall | sonicos | * | <built-in method update of dict object at 0x72a99a7f36c0> | Operating System |
| sonicwall | sonicos | * | <built-in method update of dict object at 0x72a9b0ad8a80> | Operating System |
| sonicwall | sonicos | * | <built-in method update of dict object at 0x72a9cdf039c0> | Operating System |
| sonicwall | sonicos | * | <built-in method update of dict object at 0x72a99a6430c0> | Operating System |
| sonicwall | sonicos | 6.2.7.0 | <built-in method update of dict object at 0x72a99a642c40> | Operating System |
| sonicwall | sonicos | 6.2.7.1 | <built-in method update of dict object at 0x72a99a7f22c0> | Operating System |
| sonicwall | sonicos | 6.2.7.7 | <built-in method update of dict object at 0x72a9cdf03900> | Operating System |
| siemens | siprotec_5_firmware | * | <built-in method update of dict object at 0x72a9cdf03b00> | Operating System |
| netapp | e-series_santricity_os_controller | * | <built-in method update of dict object at 0x72a9b0b02f40> | Operating System |
| siemens | siprotec_5_firmware | * | <built-in method update of dict object at 0x72a99a6411c0> | Operating System |
| siemens | power_meter_9410_firmware | * | <built-in method update of dict object at 0x72a99a7f0100> | Operating System |
| siemens | power_meter_9810_firmware | * | <built-in method update of dict object at 0x72a99a7f1540> | Operating System |
| siemens | ruggedcom_win7000_firmware | * | <built-in method update of dict object at 0x72a99a6424c0> | Operating System |
| siemens | ruggedcom_win7018_firmware | * | <built-in method update of dict object at 0x72a9cdf03940> | Operating System |
| siemens | ruggedcom_win7025_firmware | * | <built-in method update of dict object at 0x72a99a7f1d40> | Operating System |
| siemens | ruggedcom_win7200_firmware | * | <built-in method update of dict object at 0x72a9cdf021c0> | Operating System |
| oracle | communications_eagle | * | <built-in method update of dict object at 0x72a99a642600> | Application |
| belden | hirschmann_hios | * | <built-in method update of dict object at 0x72a99a642d00> | Operating System |
| belden | hirschmann_hios | * | <built-in method update of dict object at 0x72a99a640b80> | Operating System |
| belden | hirschmann_hios | * | <built-in method update of dict object at 0x72a9b0c47d00> | Operating System |
| belden | hirschmann_hios | * | <built-in method update of dict object at 0x72a99a640800> | Operating System |
| belden | garrettcom_magnum_dx940e_firmware | * | <built-in method update of dict object at 0x72a9b091b980> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:windriver:vxworks:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:windriver:vxworks:7.0:-:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:sonicwall:sonicos:6.2.7.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:sonicwall:sonicos:6.2.7.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:sonicwall:sonicos:6.2.7.7:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:siemens:siprotec_5_firmware:*:*:*:*:*:*:*:cp200 |
| Vulnerable | CPE |
|---|---|
| No | cpe:2.3:h:siemens:siprotec_5:-:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:siemens:siprotec_5_firmware:*:*:*:*:*:*:*:cp300 |
| Vulnerable | CPE |
|---|---|
| No | cpe:2.3:h:siemens:siprotec_5:-:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:siemens:power_meter_9410_firmware:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| No | cpe:2.3:h:siemens:power_meter_9410:-:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:siemens:power_meter_9810_firmware:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| No | cpe:2.3:h:siemens:power_meter_9810:-:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:siemens:ruggedcom_win7000_firmware:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| No | cpe:2.3:h:siemens:ruggedcom_win7000:-:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:siemens:ruggedcom_win7018_firmware:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| No | cpe:2.3:h:siemens:ruggedcom_win7018:-:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:siemens:ruggedcom_win7025_firmware:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| No | cpe:2.3:h:siemens:ruggedcom_win7025:-:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:siemens:ruggedcom_win7200_firmware:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| No | cpe:2.3:h:siemens:ruggedcom_win7200:-:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:oracle:communications_eagle:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:belden:hirschmann_hios:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| No | cpe:2.3:h:belden:hirschmann_ees20:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:belden:hirschmann_ees25:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:belden:hirschmann_eesx20:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:belden:hirschmann_eesx30:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:belden:hirschmann_grs1020:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:belden:hirschmann_grs1030:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:belden:hirschmann_grs1042:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:belden:hirschmann_grs1120:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:belden:hirschmann_grs1130:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:belden:hirschmann_grs1142:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:belden:hirschmann_msp30:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:belden:hirschmann_msp32:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:belden:hirschmann_rail_switch_power_lite:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:belden:hirschmann_rail_switch_power_smart:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:belden:hirschmann_red25:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:belden:hirschmann_rsp20:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:belden:hirschmann_rsp25:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:belden:hirschmann_rsp30:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:belden:hirschmann_rsp35:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:belden:hirschmann_rspe30:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:belden:hirschmann_rspe32:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:belden:hirschmann_rspe35:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:belden:hirschmann_rspe37:-:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:belden:hirschmann_hios:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| No | cpe:2.3:h:belden:hirschmann_msp40:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:belden:hirschmann_octopus_os3:-:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:belden:hirschmann_hios:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| No | cpe:2.3:h:belden:hirschmann_dragon_mach4000:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:belden:hirschmann_dragon_mach4500:-:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:belden:hirschmann_hios:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| No | cpe:2.3:h:belden:hirschmann_eagle_one:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:belden:hirschmann_eagle20:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:belden:hirschmann_eagle30:-:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:belden:garrettcom_magnum_dx940e_firmware:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| No | cpe:2.3:h:belden:garrettcom_magnum_dx940e:-:*:*:*:*:*:*:* |