CVE-2019-12255
critical · 9.8Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow.
9.8
CVSS
75.3%
EPSS (exploit prob.)
99th
EPSS percentile
2019-08-09
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-120
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| windriver | vxworks | >= 6.5, < 6.9.4 |
| netapp | e-series_santricity_os_controller | >= 8.00, <= 8.40.50.00 |
| sonicwall | sonicos | >= 5.9.0.0, <= 5.9.0.7 |
| sonicwall | sonicos | >= 5.9.1.0., <= 5.9.1.12 |
| sonicwall | sonicos | >= 6.2.0.0, <= 6.2.3.1 |
| sonicwall | sonicos | >= 6.2.4.0, <= 6.2.4.3 |
| sonicwall | sonicos | >= 6.2.5.0, <= 6.2.5.3 |
| sonicwall | sonicos | >= 6.2.6.0, <= 6.2.6.1 |
| sonicwall | sonicos | >= 6.2.7.0, <= 6.2.7.4 |
| sonicwall | sonicos | >= 6.2.9.0, <= 6.2.9.2 |
| sonicwall | sonicos | >= 6.5.0.0, <= 6.5.0.3 |
| sonicwall | sonicos | >= 6.5.1.0, <= 6.5.1.4 |
| sonicwall | sonicos | >= 6.5.2.0, <= 6.5.2.3 |
| sonicwall | sonicos | >= 6.5.3.0, <= 6.5.3.3 |
| sonicwall | sonicos | >= 6.5.4.0., <= 6.5.4.3 |
| sonicwall | sonicos | 6.2.7.0 |
| sonicwall | sonicos | 6.2.7.1 |
| sonicwall | sonicos | 6.2.7.7 |
| siemens | siprotec_5_firmware | < 7.91 |
| siemens | siprotec_5 | all versions |
| siemens | siprotec_5_firmware | all versions |
| siemens | siprotec_5 | all versions |
| siemens | siprotec_5_firmware | all versions |
| siemens | siprotec_5 | all versions |
| siemens | power_meter_9410_firmware | < 2.2.1 |
| siemens | power_meter_9410 | all versions |
| siemens | power_meter_9810_firmware | all versions |
| siemens | power_meter_9810 | all versions |
| siemens | ruggedcom_win7000_firmware | < bs5.2.461.17 |
| siemens | ruggedcom_win7000 | all versions |
| siemens | ruggedcom_win7018_firmware | < bs5.2.461.17 |
| siemens | ruggedcom_win7018 | all versions |
| siemens | ruggedcom_win7025_firmware | < bs5.2.461.17 |
| siemens | ruggedcom_win7025 | all versions |
| siemens | ruggedcom_win7200_firmware | < bs5.2.461.17 |
| siemens | ruggedcom_win7200 | all versions |
| belden | hirschmann_hios | <= 07.0.07 |
| belden | hirschmann_ees20 | all versions |
| belden | hirschmann_ees25 | all versions |
| belden | hirschmann_eesx20 | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://packetstormsecurity.com/files/154022/VxWorks-6.8-Integer-Underflow.html
- https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009
- https://security.netapp.com/advisory/ntap-20190802-0001/
- https://support.f5.com/csp/article/K41190253
- https://support.f5.com/csp/article/K41190253?utm_source=f5support&%3Butm_medium=RSS
- https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12255
- https://support2.windriver.com/index.php?page=security-notices
- https://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/
- http://packetstormsecurity.com/files/154022/VxWorks-6.8-Integer-Underflow.html
- https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009
- https://security.netapp.com/advisory/ntap-20190802-0001/
- https://support.f5.com/csp/article/K41190253
- https://support.f5.com/csp/article/K41190253?utm_source=f5support&%3Butm_medium=RSS
- https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12255
- https://support2.windriver.com/index.php?page=security-notices
- https://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2019-12255