NetSight
IP …
critical9.8

CVE-2019-12260

Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4).

Impact

Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4). This is an IPNET security vulnerability: TCP Urgent Pointer state confusion caused by a malformed TCP AO option.

Affected products

VendorProductAffected versions
WindriverVxworks
from 6.5 before 6.9.4.12
Version 7.0
SonicwallSonicos
from 5.9.0.0 through 5.9.0.7
from 5.9.1.0. through 5.9.1.12
from 6.2.0.0 through 6.2.3.1
from 6.2.4.0 through 6.2.4.3
from 6.2.5.0 through 6.2.5.3
from 6.2.6.0 through 6.2.6.1
SiemensSiprotec 5 Firmware
before 7.59
before 7.91
NetappE-Series Santricity Os Controller
from 8.00 through 8.40.50.00
SiemensPower Meter 9410 Firmware
before 2.2.1
SiemensPower Meter 9810 Firmware
All versions
SiemensRuggedcom Win7000 Firmware
before bs5.2.461.17
SiemensRuggedcom Win7018 Firmware
before bs5.2.461.17
SiemensRuggedcom Win7025 Firmware
before bs5.2.461.17
SiemensRuggedcom Win7200 Firmware
before bs5.2.461.17
OracleCommunications Eagle
from 46.6.0 through 46.8.2
BeldenHirschmann Hios
through 07.0.07
through 07.5.01
through 07.2.04
through 05.3.06

Weakness classification

CWE-120

References