IM
IronMonkey Threat Research

CVE-2019-12263 HIGH

Published: 2019-08-09 | Last Modified: 2026-06-17 | Status: Modified

Description

Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4). There is an IPNET security vulnerability: TCP Urgent Pointer state confusion due to race condition.

Additional Descriptions (1)

Wind River VxWorks versiones 6.9.4 y vx7, presenta un Desbordamiento de Búfer en el componente TCP (problema 4 de 4). Se presenta una vulnerabilidad de seguridad de IPNET: Confusión de estado de TCP Urgent Pointer debido a una condición de carrera.

CVSS Metrics

Base Score: 8.1 (HIGH)

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK
Attack ComplexityHIGH
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactHIGH
Integrity ImpactHIGH
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 2.2

Impact Score: 5.9

Base Score: 6.8 (MEDIUM)

AV:N/AC:M/Au:N/C:P/I:P/A:P

Access VectorNETWORK
Access ComplexityMEDIUM
AuthenticationNONE
Confidentiality ImpactPARTIAL
Integrity ImpactPARTIAL
Availability ImpactPARTIAL

Source: [email protected]

Type: Primary

Exploitability Score: 8.6

Impact Score: 6.4

Weaknesses

Source Type Description
[email protected] Primary
en CWE-362
en CWE-787

Affected Products

Vendor Product Version Update Type
windriver vxworks * <built-in method update of dict object at 0x72a9b0aad740> Operating System
windriver vxworks 7.0 <built-in method update of dict object at 0x72a9b0aad640> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9cc7f6140> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9b0928380> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9b0aafa40> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9b0aaef40> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9b0aafb40> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9b0aae300> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9b092a480> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9b0aaf6c0> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9b092a500> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9b0aaf980> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9cc7f5f40> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9b0928c40> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9b0aac380> Operating System
sonicwall sonicos 6.2.7.0 <built-in method update of dict object at 0x72a9cc62c940> Operating System
sonicwall sonicos 6.2.7.1 <built-in method update of dict object at 0x72a9b0aafa80> Operating System
sonicwall sonicos 6.2.7.7 <built-in method update of dict object at 0x72a9b092a580> Operating System
siemens siprotec_5_firmware * <built-in method update of dict object at 0x72a9b0aad780> Operating System
netapp e-series_santricity_os_controller * <built-in method update of dict object at 0x72a9b092bfc0> Operating System
siemens siprotec_5_firmware * <built-in method update of dict object at 0x72a9e4155580> Operating System
siemens power_meter_9410_firmware * <built-in method update of dict object at 0x72a9b0aaf700> Operating System
siemens power_meter_9810_firmware * <built-in method update of dict object at 0x72a9ccf8b8c0> Operating System
siemens ruggedcom_win7000_firmware * <built-in method update of dict object at 0x72a9b0928280> Operating System
siemens ruggedcom_win7018_firmware * <built-in method update of dict object at 0x72a9cc7f5440> Operating System
siemens ruggedcom_win7025_firmware * <built-in method update of dict object at 0x72a9b0aad3c0> Operating System
siemens ruggedcom_win7200_firmware * <built-in method update of dict object at 0x72a9b0929740> Operating System
belden hirschmann_hios * <built-in method update of dict object at 0x72a9b092b680> Operating System
belden hirschmann_hios * <built-in method update of dict object at 0x72a9b092b100> Operating System
belden hirschmann_hios * <built-in method update of dict object at 0x72a9b092b2c0> Operating System
belden hirschmann_hios * <built-in method update of dict object at 0x72a9b0aadd80> Operating System
belden garrettcom_magnum_dx940e_firmware * <built-in method update of dict object at 0x72a9b092a2c0> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:windriver:vxworks:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:windriver:vxworks:7.0:-:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:6.2.7.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:6.2.7.1:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:6.2.7.7:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:siemens:siprotec_5_firmware:*:*:*:*:*:*:*:cp200

Operator: OR

Vulnerable CPE
No cpe:2.3:h:siemens:siprotec_5:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:siemens:siprotec_5_firmware:*:*:*:*:*:*:*:cp300

Operator: OR

Vulnerable CPE
No cpe:2.3:h:siemens:siprotec_5:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:siemens:power_meter_9410_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:siemens:power_meter_9410:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:siemens:power_meter_9810_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:siemens:power_meter_9810:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:siemens:ruggedcom_win7000_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:siemens:ruggedcom_win7000:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:siemens:ruggedcom_win7018_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:siemens:ruggedcom_win7018:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:siemens:ruggedcom_win7025_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:siemens:ruggedcom_win7025:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:siemens:ruggedcom_win7200_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:siemens:ruggedcom_win7200:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:belden:hirschmann_hios:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:belden:hirschmann_ees20:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_ees25:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_eesx20:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_eesx30:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_grs1020:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_grs1030:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_grs1042:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_grs1120:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_grs1130:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_grs1142:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_msp30:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_msp32:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_rail_switch_power_lite:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_rail_switch_power_smart:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_red25:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_rsp20:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_rsp25:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_rsp30:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_rsp35:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_rspe30:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_rspe32:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_rspe35:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_rspe37:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:belden:hirschmann_hios:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:belden:hirschmann_msp40:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_octopus_os3:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:belden:hirschmann_hios:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:belden:hirschmann_dragon_mach4000:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_dragon_mach4500:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:belden:hirschmann_hios:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:belden:hirschmann_eagle_one:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_eagle20:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_eagle30:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:belden:garrettcom_magnum_dx940e_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:belden:garrettcom_magnum_dx940e:-:*:*:*:*:*:*:*

References

Notification
Message here