The vulnerability of TCP protocols in real-time operating systems like Wind River VxWorks allows attackers to trigger service interruptions.

🗓️ 06 Apr 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Transmission Control Protocol vulnerability in Wind River VxWorks may allow remote service interruptions.

Reporter	Title	Published	Views	Family All 33
Tenable Nessus	VxWorks 6.9.x < 6.9.4.12 / 7 (SR540) / 7 (SR610) Multiple Vulnerabilities (URGENT/11)	29 Jul 201900:00	–	nessus
Tenable Nessus	Cisco SPA100 Series Multiple Vulnerabilities	17 Oct 201900:00	–	nessus
Tenable Nessus	Windriver Vxworks Session Fixation	8 Nov 201900:00	–	nessus
Tenable Nessus	SonicWall SonicOS Firewall Multiple Management Vulnerabilities (URGENT/11)	29 Jul 201900:00	–	nessus
Tenable Nessus	ABB Improper Neutralization of Argument Delimiters in a Command in Wind River VxWorks (CVE-2019-12258)	10 May 202300:00	–	nessus
Tenable Nessus	Hirschmann HiOS Switches Argument Injection or Modification (CVE-2019-12258)	10 Jun 202400:00	–	nessus
Tenable Nessus	Siemens Improper Neutralization of Argument Delimiters in a Command in Wind River VxWorks (CVE-2019-12258)	7 Feb 202200:00	–	nessus
Tenable Nessus	Wind River VxWorks Multiple Vulnerabilities (URGENT/11)	29 Jul 201900:00	–	nessus
Tenable Nessus	Xerox WorkCentre Multiple Vulnerabilities (XRX19-016) (URGENT/11)	29 Jul 201900:00	–	nessus
Broadcom	BSA-2019-840	30 Jul 201900:00	–	broadcom

Vulners

Node

red_lion_controls,siprotec_5_cpu_cp300Range≤8.01

OR

red_lion_controls,siprotec_5_cpu_cp100Range≤8.01

OR

wind_river_systems,vxworksRange6.9–6.9.4.12

Source	Link
belden	www.belden.com/hubfs/support/security/bulletins/Belden_Security_Bulletin_BSECV-2019-05_1v3.pdf
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf
security	www.security.netapp.com/advisory/ntap-20190802-0001/
support2	www.support2.windriver.com/index.php
windriver	www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/
web	www.web.nvd.nist.gov/view/vuln/detail

06 Apr 2020 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 25

CVSS 35.3

EPSS0.05895

Transmission Control Protocol Wind River VxWorks Options creation vulnerability Remote service interruptions