NetSight
IP …
critical9.8Public exploit code

CVE-2019-12255

Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4).

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow.

Affected products

VendorProductAffected versions
WindriverVxworks
from 6.5 before 6.9.4
NetappE-Series Santricity Os Controller
from 8.00 through 8.40.50.00
SonicwallSonicos
from 5.9.0.0 through 5.9.0.7
from 5.9.1.0. through 5.9.1.12
from 6.2.0.0 through 6.2.3.1
from 6.2.4.0 through 6.2.4.3
from 6.2.5.0 through 6.2.5.3
from 6.2.6.0 through 6.2.6.1
SiemensSiprotec 5 Firmware
before 7.91
All versions
SiemensPower Meter 9410 Firmware
before 2.2.1
SiemensPower Meter 9810 Firmware
All versions
SiemensRuggedcom Win7000 Firmware
before bs5.2.461.17
SiemensRuggedcom Win7018 Firmware
before bs5.2.461.17
SiemensRuggedcom Win7025 Firmware
before bs5.2.461.17
SiemensRuggedcom Win7200 Firmware
before bs5.2.461.17
BeldenHirschmann Hios
through 07.0.07
through 07.5.01
through 07.2.04
through 05.3.06
BeldenGarrettcom Magnum Dx940e Firmware
through 1.0.1_y7

Weakness classification

CWE-120

References