Vulnerability Intelligence Report
CVE-2019-12255
Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow.
No Active Exploit Signals
CVSS Base Score
9.8
CRITICAL
EPSS Probability:75.25%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| windriver | vxworks | all |
| netapp | e-series_santricity_os_controller | all |
| sonicwall | sonicos | 6.2.7.0, 6.2.7.1, 6.2.7.7 |
| siemens | siprotec_5_firmware | all |
| siemens | siprotec_5 | all |
| siemens | power_meter_9410_firmware | all |
| siemens | power_meter_9410 | all |
| siemens | power_meter_9810_firmware | all |
| siemens | power_meter_9810 | all |
| siemens | ruggedcom_win7000_firmware | all |
| siemens | ruggedcom_win7000 | all |
| siemens | ruggedcom_win7018_firmware | all |
| siemens | ruggedcom_win7018 | all |
| siemens | ruggedcom_win7025_firmware | all |
| siemens | ruggedcom_win7025 | all |
| siemens | ruggedcom_win7200_firmware | all |
| siemens | ruggedcom_win7200 | all |
| belden | hirschmann_hios | all |
| belden | hirschmann_ees20 | all |
| belden | hirschmann_ees25 | all |
| belden | hirschmann_eesx20 | all |
| belden | hirschmann_eesx30 | all |
| belden | hirschmann_grs1020 | all |
| belden | hirschmann_grs1030 | all |
| belden | hirschmann_grs1042 | all |
| belden | hirschmann_grs1120 | all |
| belden | hirschmann_grs1130 | all |
| belden | hirschmann_grs1142 | all |
| belden | hirschmann_msp30 | all |
| belden | hirschmann_msp32 | all |
| belden | hirschmann_rail_switch_power_lite | all |
| belden | hirschmann_rail_switch_power_smart | all |
| belden | hirschmann_red25 | all |
| belden | hirschmann_rsp20 | all |
| belden | hirschmann_rsp25 | all |
| belden | hirschmann_rsp30 | all |
| belden | hirschmann_rsp35 | all |
| belden | hirschmann_rspe30 | all |
| belden | hirschmann_rspe32 | all |
| belden | hirschmann_rspe35 | all |
| belden | hirschmann_rspe37 | all |
| belden | hirschmann_msp40 | all |
| belden | hirschmann_octopus_os3 | all |
| belden | hirschmann_dragon_mach4000 | all |
| belden | hirschmann_dragon_mach4500 | all |
| belden | hirschmann_eagle_one | all |
| belden | hirschmann_eagle20 | all |
| belden | hirschmann_eagle30 | all |
| belden | garrettcom_magnum_dx940e_firmware | all |
| belden | garrettcom_magnum_dx940e | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
75.250%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2019-05-21T00:00:00 |
| Published | 2019-08-09T19:18:03 |
| Last Updated | 2024-08-04T23:17:39 |
Community Chatter & Buzz