IM
IronMonkey Threat Research

CVE-2019-12265 MEDIUM

Published: 2019-08-09 | Last Modified: 2026-06-17 | Status: Modified

Description

Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There is an IPNET security vulnerability: IGMP Information leak via IGMPv3 specific membership report.

Additional Descriptions (1)

Wind River VxWorks versiones 6.5, 6.6, 6.7, 6.8, 6.9.3 y 6.9.4, presenta una Pérdida de Memoria en el componente cliente IGMPv3. Se presenta una vulnerabilidad de seguridad de IPNET: Un filtrado de información de IGMP por medio de un reporte de membresía específico de IGMPv3.

CVSS Metrics

Base Score: 5.3 (MEDIUM)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactLOW
Integrity ImpactNONE
Availability ImpactNONE

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 1.4

Base Score: 5.0 (MEDIUM)

AV:N/AC:L/Au:N/C:P/I:N/A:N

Access VectorNETWORK
Access ComplexityLOW
AuthenticationNONE
Confidentiality ImpactPARTIAL
Integrity ImpactNONE
Availability ImpactNONE

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 2.9

Weaknesses

Source Type Description
[email protected] Primary
en CWE-401

Affected Products

Vendor Product Version Update Type
windriver vxworks * <built-in method update of dict object at 0x72a9cd086f80> Operating System
windriver vxworks 7.0 <built-in method update of dict object at 0x72a9ccf9f240> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9ccf9fb00> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9b0b3a100> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9b0b39a00> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9b0b3a080> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9ccf9e0c0> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9cd086280> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9cd087000> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9b0b3b580> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9cd0846c0> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9ccd2af40> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9cc6db280> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9ccd28d80> Operating System
sonicwall sonicos * <built-in method update of dict object at 0x72a9cd0872c0> Operating System
sonicwall sonicos 6.2.7.0 <built-in method update of dict object at 0x72a9ccd29280> Operating System
sonicwall sonicos 6.2.7.1 <built-in method update of dict object at 0x72a9cd085280> Operating System
sonicwall sonicos 6.2.7.7 <built-in method update of dict object at 0x72a9ccd2b5c0> Operating System
siemens siprotec_5_firmware * <built-in method update of dict object at 0x72a9b0b38840> Operating System
siemens siprotec_5_firmware * <built-in method update of dict object at 0x72a9cc523cc0> Operating System
siemens siprotec_5_firmware * <built-in method update of dict object at 0x72a9ccd2b0c0> Operating System
netapp e-series_santricity_os_controller * <built-in method update of dict object at 0x72a9cd086a80> Operating System
siemens power_meter_9410_firmware * <built-in method update of dict object at 0x72a9ccf9c300> Operating System
siemens power_meter_9810_firmware * <built-in method update of dict object at 0x72a9b0b3b6c0> Operating System
siemens ruggedcom_win7000_firmware * <built-in method update of dict object at 0x72a9b0aa40c0> Operating System
siemens ruggedcom_win7018_firmware * <built-in method update of dict object at 0x72a9cd085800> Operating System
siemens ruggedcom_win7025_firmware * <built-in method update of dict object at 0x72a9ccd2abc0> Operating System
siemens ruggedcom_win7200_firmware * <built-in method update of dict object at 0x72a9cd084280> Operating System
belden hirschmann_hios * <built-in method update of dict object at 0x72a9cd086600> Operating System
belden hirschmann_hios * <built-in method update of dict object at 0x72a9cd086900> Operating System
belden hirschmann_hios * <built-in method update of dict object at 0x72a9cd084540> Operating System
belden hirschmann_hios * <built-in method update of dict object at 0x72a9cd0868c0> Operating System
belden garrettcom_magnum_dx940e_firmware * <built-in method update of dict object at 0x72a99977a400> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:windriver:vxworks:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:windriver:vxworks:7.0:-:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:6.2.7.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:6.2.7.1:*:*:*:*:*:*:*
Yes cpe:2.3:o:sonicwall:sonicos:6.2.7.7:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:siemens:siprotec_5_firmware:*:*:*:*:*:*:*:cp300

Operator: OR

Vulnerable CPE
No cpe:2.3:h:siemens:siprotec_5:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:siemens:siprotec_5_firmware:*:*:*:*:*:*:*:cp200

Operator: OR

Vulnerable CPE
No cpe:2.3:h:siemens:siprotec_5:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:siemens:siprotec_5_firmware:*:*:*:*:*:*:*:cp300

Operator: OR

Vulnerable CPE
No cpe:2.3:h:siemens:siprotec_5:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:siemens:power_meter_9410_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:siemens:power_meter_9410:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:siemens:power_meter_9810_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:siemens:power_meter_9810:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:siemens:ruggedcom_win7000_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:siemens:ruggedcom_win7000:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:siemens:ruggedcom_win7018_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:siemens:ruggedcom_win7018:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:siemens:ruggedcom_win7025_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:siemens:ruggedcom_win7025:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:siemens:ruggedcom_win7200_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:siemens:ruggedcom_win7200:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:belden:hirschmann_hios:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:belden:hirschmann_ees20:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_ees25:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_eesx20:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_eesx30:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_grs1020:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_grs1030:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_grs1042:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_grs1120:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_grs1130:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_grs1142:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_msp30:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_msp32:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_rail_switch_power_lite:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_rail_switch_power_smart:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_red25:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_rsp20:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_rsp25:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_rsp30:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_rsp35:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_rspe30:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_rspe32:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_rspe35:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_rspe37:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:belden:hirschmann_hios:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:belden:hirschmann_msp40:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_octopus_os3:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:belden:hirschmann_hios:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:belden:hirschmann_dragon_mach4000:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_dragon_mach4500:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:belden:hirschmann_hios:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:belden:hirschmann_eagle_one:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_eagle20:-:*:*:*:*:*:*:*
No cpe:2.3:h:belden:hirschmann_eagle30:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:belden:garrettcom_magnum_dx940e_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:belden:garrettcom_magnum_dx940e:-:*:*:*:*:*:*:*

References

Notification
Message here