CVE-2019-12263 : Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4). There is an IPNET security v

Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4). There is an IPNET security vulnerability: TCP Urgent Pointer state confusion due to race condition.

Published 2019-08-09 19:15:11

Updated 2022-08-12 18:44:49

Source MITRE

View at NVD, CVE.org

Vulnerability category: OverflowMemory Corruption

Exploit prediction scoring system (EPSS) score for CVE-2019-12263

EPSS FAQ

1.39%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 86 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2019-12263

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P	8.6	6.4	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
8.1	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	2.2	5.9	NIST
Attack Vector: Network Attack Complexity: High Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2019-12263

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

Assigned by: nvd@nist.gov (Primary)

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2019-12263

Products affected by CVE-2019-12263

Windriver » Vxworks
Versions from including (>=) 6.5 and before (<) 6.9.4.12
cpe:2.3:o:windriver:vxworks:*:*:*:*:*:*:*:*
Matching versions
Windriver » Vxworks » Version: 7.0
cpe:2.3:o:windriver:vxworks:7.0:-:*:*:*:*:*:*
Matching versions
Siemens » Siprotec 5 Firmware cp200
Versions before (<) 7.59
cpe:2.3:o:siemens:siprotec_5_firmware:*:*:*:*:*:*:*:cp200
Matching versions
When used together with: Siemens » Siprotec 5 » Version: N/A
Siemens » Siprotec 5 Firmware cp300
Versions before (<) 7.91
cpe:2.3:o:siemens:siprotec_5_firmware:*:*:*:*:*:*:*:cp300
Matching versions
When used together with: Siemens » Siprotec 5 » Version: N/A
Siemens » Ruggedcom Win7000 Firmware
Versions before (<) bs5.2.461.17
cpe:2.3:o:siemens:ruggedcom_win7000_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Ruggedcom Win7000 » Version: N/A
Siemens » Ruggedcom Win7200 Firmware
Versions before (<) bs5.2.461.17
cpe:2.3:o:siemens:ruggedcom_win7200_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Ruggedcom Win7200 » Version: N/A
Siemens » Ruggedcom Win7025 Firmware
Versions before (<) bs5.2.461.17
cpe:2.3:o:siemens:ruggedcom_win7025_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Ruggedcom Win7025 » Version: N/A
Siemens » Ruggedcom Win7018 Firmware
Versions before (<) bs5.2.461.17
cpe:2.3:o:siemens:ruggedcom_win7018_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Ruggedcom Win7018 » Version: N/A
Siemens » Power Meter 9410 Firmware
Versions before (<) 2.2.1
cpe:2.3:o:siemens:power_meter_9410_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Power Meter 9410 » Version: N/A
Siemens » Power Meter 9810 Firmware
cpe:2.3:o:siemens:power_meter_9810_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Power Meter 9810 » Version: N/A
Sonicwall » Sonicos
Versions from including (>=) 6.2.0.0 and up to, including, (<=) 6.2.3.1
cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Matching versions
Sonicwall » Sonicos
Versions from including (>=) 6.5.4.0. and up to, including, (<=) 6.5.4.3
cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Matching versions
Sonicwall » Sonicos
Versions from including (>=) 6.5.0.0 and up to, including, (<=) 6.5.0.3
cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Matching versions
Sonicwall » Sonicos
Versions from including (>=) 6.2.4.0 and up to, including, (<=) 6.2.4.3
cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Matching versions
Sonicwall » Sonicos
Versions from including (>=) 6.2.5.0 and up to, including, (<=) 6.2.5.3
cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Matching versions
Sonicwall » Sonicos
Versions from including (>=) 6.2.6.0 and up to, including, (<=) 6.2.6.1
cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Matching versions
Sonicwall » Sonicos
Versions from including (>=) 5.9.0.0 and up to, including, (<=) 5.9.0.7
cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Matching versions
Sonicwall » Sonicos
Versions from including (>=) 6.5.3.0 and up to, including, (<=) 6.5.3.3
cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Matching versions
Sonicwall » Sonicos
Versions from including (>=) 6.2.9.0 and up to, including, (<=) 6.2.9.2
cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Matching versions
Sonicwall » Sonicos
Versions from including (>=) 6.2.7.0 and up to, including, (<=) 6.2.7.4
cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Matching versions
Sonicwall » Sonicos
Versions from including (>=) 5.9.1.0. and up to, including, (<=) 5.9.1.12
cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Matching versions
Sonicwall » Sonicos
Versions from including (>=) 6.5.2.0 and up to, including, (<=) 6.5.2.3
cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Matching versions
Sonicwall » Sonicos
Versions from including (>=) 6.5.1.0 and up to, including, (<=) 6.5.1.4
cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Matching versions
Sonicwall » Sonicos » Version: 6.2.7.0
cpe:2.3:o:sonicwall:sonicos:6.2.7.0:*:*:*:*:*:*:*
Matching versions
Sonicwall » Sonicos » Version: 6.2.7.1
cpe:2.3:o:sonicwall:sonicos:6.2.7.1:*:*:*:*:*:*:*
Matching versions
Sonicwall » Sonicos » Version: 6.2.7.7
cpe:2.3:o:sonicwall:sonicos:6.2.7.7:*:*:*:*:*:*:*
Matching versions
Netapp » E-series Santricity Os Controller
Versions from including (>=) 8.00 and up to, including, (<=) 8.40.50.00
cpe:2.3:o:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*
Matching versions
Belden » Hirschmann Hios
Versions up to, including, (<=) 05.3.06
cpe:2.3:o:belden:hirschmann_hios:*:*:*:*:*:*:*:*
Matching versions
When used together with: Belden » Hirschmann Eagle One » Version: N/A
When used together with: Belden » Hirschmann Eagle20 » Version: N/A
When used together with: Belden » Hirschmann Eagle30 » Version: N/A
Belden » Hirschmann Hios
Versions up to, including, (<=) 07.0.07
cpe:2.3:o:belden:hirschmann_hios:*:*:*:*:*:*:*:*
Matching versions
When used together with: Belden » Hirschmann Ees20 » Version: N/A
When used together with: Belden » Hirschmann Ees25 » Version: N/A
When used together with: Belden » Hirschmann Eesx20 » Version: N/A
When used together with: Belden » Hirschmann Eesx30 » Version: N/A
When used together with: Belden » Hirschmann Grs1020 » Version: N/A
When used together with: Belden » Hirschmann Grs1030 » Version: N/A
When used together with: Belden » Hirschmann Grs1042 » Version: N/A
When used together with: Belden » Hirschmann Grs1120 » Version: N/A
When used together with: Belden » Hirschmann Grs1130 » Version: N/A
When used together with: Belden » Hirschmann Grs1142 » Version: N/A
When used together with: Belden » Hirschmann Msp30 » Version: N/A
When used together with: Belden » Hirschmann Msp32 » Version: N/A
When used together with: Belden » Hirschmann Rail Switch Power Lite » Version: N/A
When used together with: Belden » Hirschmann Rail Switch Power Smart » Version: N/A
When used together with: Belden » Hirschmann Red25 » Version: N/A
When used together with: Belden » Hirschmann Rsp20 » Version: N/A
When used together with: Belden » Hirschmann Rsp25 » Version: N/A
When used together with: Belden » Hirschmann Rsp30 » Version: N/A
When used together with: Belden » Hirschmann Rsp35 » Version: N/A
When used together with: Belden » Hirschmann Rspe30 » Version: N/A
When used together with: Belden » Hirschmann Rspe32 » Version: N/A
When used together with: Belden » Hirschmann Rspe35 » Version: N/A
When used together with: Belden » Hirschmann Rspe37 » Version: N/A
Belden » Hirschmann Hios
Versions up to, including, (<=) 07.5.01
cpe:2.3:o:belden:hirschmann_hios:*:*:*:*:*:*:*:*
Matching versions
When used together with: Belden » Hirschmann Msp40 » Version: N/A
When used together with: Belden » Hirschmann Octopus Os3 » Version: N/A
Belden » Hirschmann Hios
Versions up to, including, (<=) 07.2.04
cpe:2.3:o:belden:hirschmann_hios:*:*:*:*:*:*:*:*
Matching versions
When used together with: Belden » Hirschmann Dragon Mach4000 » Version: N/A
When used together with: Belden » Hirschmann Dragon Mach4500 » Version: N/A
Belden » Garrettcom Magnum Dx940e Firmware
Versions up to, including, (<=) 1.0.1_y7
cpe:2.3:o:belden:garrettcom_magnum_dx940e_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Belden » Garrettcom Magnum Dx940e » Version: N/A

Vulnerability Details : CVE-2019-12263

Exploit prediction scoring system (EPSS) score for CVE-2019-12263

CVSS scores for CVE-2019-12263

CWE ids for CVE-2019-12263

References for CVE-2019-12263

Products affected by CVE-2019-12263