NetSight
IP …
medium5.3

CVE-2019-12265

Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component.

Impact

Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There is an IPNET security vulnerability: IGMP Information leak via IGMPv3 specific membership report.

Affected products

VendorProductAffected versions
WindriverVxworks
from 6.5 before 6.9.4.12
Version 7.0
SonicwallSonicos
from 5.9.0.0 through 5.9.0.7
from 5.9.1.0. through 5.9.1.12
from 6.2.0.0 through 6.2.3.1
from 6.2.4.0 through 6.2.4.3
from 6.2.5.0 through 6.2.5.3
from 6.2.6.0 through 6.2.6.1
SiemensSiprotec 5 Firmware
before 7.91
before 7.59
NetappE-Series Santricity Os Controller
from 8.00 through 8.40.50.00
SiemensPower Meter 9410 Firmware
before 2.2.1
SiemensPower Meter 9810 Firmware
All versions
SiemensRuggedcom Win7000 Firmware
before bs5.2.461.17
SiemensRuggedcom Win7018 Firmware
before bs5.2.461.17
SiemensRuggedcom Win7025 Firmware
before bs5.2.461.17
SiemensRuggedcom Win7200 Firmware
before bs5.2.461.17
BeldenHirschmann Hios
through 07.0.07
through 07.5.01
through 07.2.04
through 05.3.06
BeldenGarrettcom Magnum Dx940e Firmware
through 1.0.1_y7

Weakness classification

CWE-401

References