Lucene search

MitreCVE-2019-12264

HistoryAug 05, 2019 - 6:15 p.m.

CVE-2019-12264

2019-08-0518:15:10

CWE-88

mitre

web.nvd.nist.gov

wind river

vxworks

incorrect access control

ipv4

ipdhcpc

dhcp client

cve-2019-12264

nvd

CVSS2

4.8

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:N/I:P/A:P

CVSS3

7.1

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

AI Score

8.2

Confidence

High

EPSS

0.004

Percentile

73.0%

JSON

Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component.

Affected configurations

Nvd

Node

windrivervxworksMatch6.6

windrivervxworksMatch6.7

windrivervxworksMatch6.8

windrivervxworksMatch6.9.3

windrivervxworksMatch6.9.4

windrivervxworksMatch7.0

Node

beldenhirschmann_hiosRange≤07.0.07

AND

beldenhirschmann_ees20Match-

beldenhirschmann_ees25Match-

beldenhirschmann_eesx20Match-

beldenhirschmann_eesx30Match-

beldenhirschmann_grs1020Match-

beldenhirschmann_grs1030Match-

beldenhirschmann_grs1042Match-

beldenhirschmann_grs1120Match-

beldenhirschmann_grs1130Match-

beldenhirschmann_grs1142Match-

beldenhirschmann_msp30Match-

beldenhirschmann_msp32Match-

beldenhirschmann_rail_switch_power_liteMatch-

beldenhirschmann_rail_switch_power_smartMatch-

beldenhirschmann_red25Match-

beldenhirschmann_rsp20Match-

beldenhirschmann_rsp25Match-

beldenhirschmann_rsp30Match-

beldenhirschmann_rsp35Match-

beldenhirschmann_rspe30Match-

beldenhirschmann_rspe32Match-

beldenhirschmann_rspe35Match-

beldenhirschmann_rspe37Match-

Node

beldenhirschmann_hiosRange≤07.5.01

AND

beldenhirschmann_msp40Match-

beldenhirschmann_octopus_os3Match-

Node

beldenhirschmann_hiosRange≤07.2.04

AND

beldenhirschmann_dragon_mach4000Match-

beldenhirschmann_dragon_mach4500Match-

Node

beldenhirschmann_hiosRange≤05.3.06

AND

beldenhirschmann_eagle_oneMatch-

beldenhirschmann_eagle20Match-

beldenhirschmann_eagle30Match-

Node

beldengarrettcom_magnum_dx940e_firmwareRange≤1.0.1_y7

AND

beldengarrettcom_magnum_dx940eMatch-

Node

siemensruggedcom_win7000_firmwareRange<bs5.2.461.17

AND

siemensruggedcom_win7000Match-

Node

siemensruggedcom_win7018_firmwareRange<bs5.2.461.17

AND

siemensruggedcom_win7018Match-

Node

siemensruggedcom_win7025_firmwareRange<bs5.2.461.17

AND

siemensruggedcom_win7025Match-

Node

siemensruggedcom_win7200_firmwareRange<bs5.2.461.17

AND

siemensruggedcom_win7200Match-

VendorProductVersionCPE
windrivervxworks6.6cpe:2.3:o:windriver:vxworks:6.6:*:*:*:*:*:*:*
windrivervxworks6.7cpe:2.3:o:windriver:vxworks:6.7:*:*:*:*:*:*:*
windrivervxworks6.8cpe:2.3:o:windriver:vxworks:6.8:*:*:*:*:*:*:*
windrivervxworks6.9.3cpe:2.3:o:windriver:vxworks:6.9.3:*:*:*:*:*:*:*
windrivervxworks6.9.4cpe:2.3:o:windriver:vxworks:6.9.4:*:*:*:*:*:*:*
windrivervxworks7.0cpe:2.3:o:windriver:vxworks:7.0:*:*:*:*:*:*:*
beldenhirschmann_hios*cpe:2.3:o:belden:hirschmann_hios:*:*:*:*:*:*:*:*
beldenhirschmann_ees20-cpe:2.3:h:belden:hirschmann_ees20:-:*:*:*:*:*:*:*
beldenhirschmann_ees25-cpe:2.3:h:belden:hirschmann_ees25:-:*:*:*:*:*:*:*
beldenhirschmann_eesx20-cpe:2.3:h:belden:hirschmann_eesx20:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
windriver	vxworks	6.6	cpe:2.3:o:windriver:vxworks:6.6:::::::*
windriver	vxworks	6.7	cpe:2.3:o:windriver:vxworks:6.7:::::::*
windriver	vxworks	6.8	cpe:2.3:o:windriver:vxworks:6.8:::::::*
windriver	vxworks	6.9.3	cpe:2.3:o:windriver:vxworks:6.9.3:::::::*
windriver	vxworks	6.9.4	cpe:2.3:o:windriver:vxworks:6.9.4:::::::*
windriver	vxworks	7.0	cpe:2.3:o:windriver:vxworks:7.0:::::::*
belden	hirschmann_hios	*	cpe:2.3:o:belden:hirschmann_hios::::::::
belden	hirschmann_ees20	-	cpe:2.3:h:belden:hirschmann_ees20:-:::::::*
belden	hirschmann_ees25	-	cpe:2.3:h:belden:hirschmann_ees25:-:::::::*
belden	hirschmann_eesx20	-	cpe:2.3:h:belden:hirschmann_eesx20:-:::::::*

Rows per page:

1-10 of 471

References

cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf

support.f5.com/csp/article/K41190253

support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03960en_us

support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12264

www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/

Social References

CVSS2

4.8

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:N/I:P/A:P

CVSS3

7.1

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

AI Score

8.2

Confidence

High

EPSS

0.004

Percentile

73.0%

JSON

Related for CVE-2019-12264