CVE-2019-12258
high · 7.5Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. This is a IPNET security vulnerability: DoS of TCP connection via malformed TCP options.
7.5
CVSS
23.4%
EPSS (exploit prob.)
98th
EPSS percentile
2019-08-09
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-384
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| windriver | vxworks | >= 6.5, < 6.9.4.12 |
| windriver | vxworks | 7.0 |
| sonicwall | sonicos | >= 5.9.0.0, <= 5.9.0.7 |
| sonicwall | sonicos | >= 5.9.1.0., <= 5.9.1.12 |
| sonicwall | sonicos | >= 6.2.0.0, <= 6.2.3.1 |
| sonicwall | sonicos | >= 6.2.4.0, <= 6.2.4.3 |
| sonicwall | sonicos | >= 6.2.5.0, <= 6.2.5.3 |
| sonicwall | sonicos | >= 6.2.6.0, <= 6.2.6.1 |
| sonicwall | sonicos | >= 6.2.7.0, <= 6.2.7.4 |
| sonicwall | sonicos | >= 6.2.9.0, <= 6.2.9.2 |
| sonicwall | sonicos | >= 6.5.0.0, <= 6.5.0.3 |
| sonicwall | sonicos | >= 6.5.1.0, <= 6.5.1.4 |
| sonicwall | sonicos | >= 6.5.2.0, <= 6.5.2.3 |
| sonicwall | sonicos | >= 6.5.3.0, <= 6.5.3.3 |
| sonicwall | sonicos | >= 6.5.4.0., <= 6.5.4.3 |
| sonicwall | sonicos | 6.2.7.0 |
| sonicwall | sonicos | 6.2.7.1 |
| sonicwall | sonicos | 6.2.7.7 |
| siemens | siprotec_5_firmware | < 7.59 |
| siemens | siprotec_5 | all versions |
| netapp | e-series_santricity_os_controller | >= 8.00, <= 8.40.50.00 |
| siemens | siprotec_5_firmware | < 7.91 |
| siemens | siprotec_5 | all versions |
| siemens | power_meter_9410_firmware | < 2.2.1 |
| siemens | power_meter_9410 | all versions |
| siemens | power_meter_9810_firmware | all versions |
| siemens | power_meter_9810 | all versions |
| siemens | ruggedcom_win7000_firmware | < bs5.2.461.17 |
| siemens | ruggedcom_win7000 | all versions |
| siemens | ruggedcom_win7018_firmware | < bs5.2.461.17 |
| siemens | ruggedcom_win7018 | all versions |
| siemens | ruggedcom_win7025_firmware | < bs5.2.461.17 |
| siemens | ruggedcom_win7025 | all versions |
| siemens | ruggedcom_win7200_firmware | < bs5.2.461.17 |
| siemens | ruggedcom_win7200 | all versions |
| belden | hirschmann_hios | <= 07.0.07 |
| belden | hirschmann_ees20 | all versions |
| belden | hirschmann_ees25 | all versions |
| belden | hirschmann_eesx20 | all versions |
| belden | hirschmann_eesx30 | all versions |
Check a specific version with /api/v1/cve/match.
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009
- https://security.netapp.com/advisory/ntap-20190802-0001/
- https://support.f5.com/csp/article/K41190253
- https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12258
- https://support2.windriver.com/index.php?page=security-notices
- https://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/
- https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009
- https://security.netapp.com/advisory/ntap-20190802-0001/
- https://support.f5.com/csp/article/K41190253
- https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12258
- https://support2.windriver.com/index.php?page=security-notices
- https://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2019-12258