NetSight
IP …
high7.5

CVE-2019-12259

Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component.

Impact

Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. There is an IPNET security vulnerability: DoS via NULL dereference in IGMP parsing.

Affected products

VendorProductAffected versions
WindriverVxworks
from 6.5 before 6.9.4.12
Version 7.0
SonicwallSonicos
from 5.9.0.0 through 5.9.0.7
from 5.9.1.0. through 5.9.1.12
from 6.2.0.0 through 6.2.3.1
from 6.2.4.0 through 6.2.4.3
from 6.2.5.0 through 6.2.5.3
from 6.2.6.0 through 6.2.6.1
SiemensSiprotec 5 Firmware
before 7.59
before 7.91
SiemensRuggedcom Win7000 Firmware
before bs5.2.461.17
SiemensRuggedcom Win7200 Firmware
before bs5.2.461.17
SiemensRuggedcom Win7025 Firmware
before bs5.2.461.17
SiemensRuggedcom Win7018 Firmware
before bs5.2.461.17
Siemens9410 Power Meter Firmware
before 2.2.1
Siemens9810 Power Meter Firmware
before 2.2.1
BeldenHirschmann Hios
through 07.0.07
through 07.5.01
through 07.2.04
through 05.3.06
BeldenGarrettcom Magnum Dx940e Firmware
through 1.0.1_y7

Weakness classification

CWE-476

References