NetSight
IP …
high8.8

CVE-2019-12257

Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component.

Impact

Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. There is an IPNET security vulnerability: Heap overflow in DHCP Offer/ACK parsing inside ipdhcpc.

Affected products

VendorProductAffected versions
WindriverVxworks
from 6.5 before 6.9.4
SonicwallSonicos
from 5.9.0.0 through 5.9.0.7
from 5.9.1.0. through 5.9.1.12
from 6.2.0.0 through 6.2.3.1
from 6.2.4.0 through 6.2.4.3
from 6.2.5.0 through 6.2.5.3
from 6.2.6.0 through 6.2.6.1
SiemensSiprotec 5 Firmware
before 7.59
before 7.91
NetappE-Series Santricity Os Controller
from 8.00 through 8.40.50.00
SiemensRuggedcom Win7000 Firmware
before bs5.2.461.17
SiemensRuggedcom Win7018 Firmware
before bs5.2.461.17
SiemensRuggedcom Win7025 Firmware
before bs5.2.461.17
SiemensRuggedcom Win7200 Firmware
before bs5.2.461.17
BeldenHirschmann Hios
through 07.0.07
through 07.5.01
through 07.2.04
through 05.3.06
BeldenGarrettcom Magnum Dx940e Firmware
through 1.0.1_y7

Weakness classification

CWE-120

References