Wind River VxWorks (Update A)
Successful exploitation of these vulnerabilities could allow remote code execution.
describes (11)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-12262US | critical9.8 | — | ||
Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component. IPNET security vulnerability: Handling of unsolicited Reverse ARP replies (Lo… | ||||
| CVE-2019-12261US | critical9.8 | — | ||
Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4). This is an IPNET security vulnerability: TCP Urgent Pointer state confusion dur… | ||||
| CVE-2019-12260US | critical9.8 | — | ||
Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4). This is an IPNET security vulnerability: TCP Urgent Pointer state confusion caused by a ma… | ||||
| CVE-2019-12258US | high7.5 | Exploit | ||
Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. This is a IPNET security vulnerability: DoS of TCP connection via malformed TCP options. | ||||
| CVE-2019-12255US | critical9.8 | Exploit | ||
Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow. | ||||
| CVE-2019-12265US | medium5.3 | — | ||
Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There is an IPNET security vulnerability: IGMP Information leak via IGMPv3… | ||||
| CVE-2019-12263US | high8.1 | — | ||
Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4). There is an IPNET security vulnerability: TCP Urgent Pointer state confusion due to race… | ||||
| CVE-2019-12259US | high7.5 | — | ||
Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. There is an IPNET security vulnerability: DoS via NULL dereference in IGMP pa… | ||||
| CVE-2019-12257US | high8.8 | — | ||
Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. There is an IPNET security vulnerability: Heap overflow in DHCP Offer/ACK parsing inside ipdh… | ||||
| CVE-2019-12256US | critical9.8 | — | ||
Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET security vulnerability: Stack overflow in the parsing of IPv4 packets’ IP options. | ||||
| CVE-2019-12264US | high7.1 | — | ||
Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component. | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-19-211-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-19-211-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (112)
- MitigationAdvanced Networking Technology (ANT)
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationAdvanced Networking Technology (ANT)
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationAdvanced Networking Technology (ANT)
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationAdvanced Networking Technology (ANT)
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationAdvanced Networking Technology (ANT)
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationAdvanced Networking Technology (ANT)
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationAdvanced Networking Technology (ANT)
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationAdvanced Networking Technology (ANT)
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationAdvanced Networking Technology (ANT)
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationAdvanced Networking Technology (ANT)
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationAdvanced Networking Technology (ANT)
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks 653
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks 653
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks 653
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks 653
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks 653
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks 653
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks 653
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks 653
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks 653
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks 653
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks 653
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks End-of-Life
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks End-of-Life
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks End-of-Life
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks End-of-Life
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks End-of-Life
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks End-of-Life
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks End-of-Life
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks End-of-Life
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks End-of-Life
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks End-of-Life
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks End-of-Life
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks Vx7
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks Vx7
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks Vx7
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks Vx7
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks Vx7
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks Vx7
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks Vx7
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks Vx7
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks Vx7
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks Vx7
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks Vx7
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- MitigationVxWorks bootrom network stack
Additional vendors affected by the reported vulnerabilities have also released security advisories related to their affected products. Those advisories are as follows:
- FixedAdvanced Networking Technology (ANT)
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedAdvanced Networking Technology (ANT)
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedAdvanced Networking Technology (ANT)
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedAdvanced Networking Technology (ANT)
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedAdvanced Networking Technology (ANT)
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedAdvanced Networking Technology (ANT)
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedAdvanced Networking Technology (ANT)
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedAdvanced Networking Technology (ANT)
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedAdvanced Networking Technology (ANT)
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedAdvanced Networking Technology (ANT)
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedAdvanced Networking Technology (ANT)
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks 653
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks 653
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks 653
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks 653
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks 653
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks 653
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks 653
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks 653
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks 653
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks 653
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks 653
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks End-of-Life
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks End-of-Life
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks End-of-Life
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks End-of-Life
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks End-of-Life
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks End-of-Life
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks End-of-Life
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks End-of-Life
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks End-of-Life
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks End-of-Life
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks End-of-Life
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks Vx7
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks Vx7
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks Vx7
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks Vx7
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks Vx7
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks Vx7
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks Vx7
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks Vx7
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks Vx7
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks Vx7
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks Vx7
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
- FixedVxWorks bootrom network stack
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan