Vulnerability Intelligence Report
CVE-2019-12262
Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component. IPNET security vulnerability: Handling of unsolicited Reverse ARP replies (Logical Flaw).
No Active Exploit Signals
CVSS Base Score
9.8
CRITICAL
EPSS Probability:4.12%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| windriver | vxworks | 6.6, 6.7, 6.8, 6.9, 7.0 |
| belden | hirschmann_hios | all |
| belden | hirschmann_ees20 | all |
| belden | hirschmann_ees25 | all |
| belden | hirschmann_eesx20 | all |
| belden | hirschmann_eesx30 | all |
| belden | hirschmann_grs1020 | all |
| belden | hirschmann_grs1030 | all |
| belden | hirschmann_grs1042 | all |
| belden | hirschmann_grs1120 | all |
| belden | hirschmann_grs1130 | all |
| belden | hirschmann_grs1142 | all |
| belden | hirschmann_msp30 | all |
| belden | hirschmann_msp32 | all |
| belden | hirschmann_rail_switch_power_lite | all |
| belden | hirschmann_rail_switch_power_smart | all |
| belden | hirschmann_red25 | all |
| belden | hirschmann_rsp20 | all |
| belden | hirschmann_rsp25 | all |
| belden | hirschmann_rsp30 | all |
| belden | hirschmann_rsp35 | all |
| belden | hirschmann_rspe30 | all |
| belden | hirschmann_rspe32 | all |
| belden | hirschmann_rspe35 | all |
| belden | hirschmann_rspe37 | all |
| belden | hirschmann_msp40 | all |
| belden | hirschmann_octopus_os3 | all |
| belden | hirschmann_dragon_mach4000 | all |
| belden | hirschmann_dragon_mach4500 | all |
| belden | hirschmann_eagle_one | all |
| belden | hirschmann_eagle20 | all |
| belden | hirschmann_eagle30 | all |
| belden | garrettcom_magnum_dx940e_firmware | all |
| belden | garrettcom_magnum_dx940e | all |
| siemens | ruggedcom_win7000_firmware | all |
| siemens | ruggedcom_win7000 | all |
| siemens | ruggedcom_win7018_firmware | all |
| siemens | ruggedcom_win7018 | all |
| siemens | ruggedcom_win7025_firmware | all |
| siemens | ruggedcom_win7025 | all |
| siemens | ruggedcom_win7200_firmware | all |
| siemens | ruggedcom_win7200 | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
4.116%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2019-05-21T00:00:00 |
| Published | 2019-08-14T19:18:13 |
| Last Updated | 2024-08-04T23:17:39 |
Community Chatter & Buzz