Ruckus Wireless ICX Switches Integer Overflow or Wraparound (CVE-2019-11477)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(503338);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2025/10/01");

  script_cve_id("CVE-2019-11477");
  script_xref(name:"CEA-ID", value:"CEA-2019-0456");

  script_name(english:"Ruckus Wireless ICX Switches Integer Overflow or Wraparound (CVE-2019-11477)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"Three flaws were found in the Linux kernel's handling of TCP networking. The most severe 
vulnerability could allow a remote attacker to trigger a kernel panic in systems running the 
affected software and, as a result, impact the system's availability. 
The issues have been assigned multiple CVEs: CVE-2019-11477, CVE-2019-11478 and CVE-2019-
11479. They are all considered as HIGH severity. The first two are related to the Selective 
Acknowledgement (SACK) packets combined with Maximum Segment Size (MSS), the third 
solely with the Maximum Segment Size (MSS). A remote attacker can use these flaws to cause a 
denial of service (DoS) by sending a sequence of crafted packets on a TCP connection.


This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
  script_set_attribute(attribute:"see_also", value:"https://support.ruckuswireless.com/security_bulletins/297");
  script_set_attribute(attribute:"solution", value:
"Refer to the vendor advisory.");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2019-11477");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_cwe_id(190);

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/08/15");
  script_set_attribute(attribute:"patch_publication_date", value:"2019/08/15");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/09/29");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:ruckussecurity:icx6430_series_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:ruckussecurity:icx6450_series_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:ruckussecurity:icx6610_series_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:ruckussecurity:icx7150_series_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:ruckussecurity:icx7250_series_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:ruckussecurity:icx7450_series_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:ruckussecurity:icx7650_series_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:ruckussecurity:icx7750_series_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:ruckussecurity:icx7850_series_firmware");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2025 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/RuckusWireless");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/RuckusWireless');

var asset = tenable_ot::assets::get(vendor:'RuckusWireless');

var vuln_cpes = {
    "cpe:/o:ruckussecurity:icx6430_series_firmware" :
        {"family" : "ICXSwitches", "versionEndIncluding" : "08.0.95u"},
    "cpe:/o:ruckussecurity:icx6450_series_firmware" :
        {"family" : "ICXSwitches", "versionEndIncluding" : "08.0.95u"},
    "cpe:/o:ruckussecurity:icx6610_series_firmware" :
        {"family" : "ICXSwitches", "versionEndIncluding" : "08.0.95u"},
    "cpe:/o:ruckussecurity:icx7150_series_firmware" :
        {"family" : "ICXSwitches", "versionEndIncluding" : "08.0.95s"},
    "cpe:/o:ruckussecurity:icx7250_series_firmware" :
        {"family" : "ICXSwitches", "versionEndIncluding" : "08.0.95r"},
    "cpe:/o:ruckussecurity:icx7450_series_firmware" :
        {"family" : "ICXSwitches", "versionEndIncluding" : "08.0.95r"},
    "cpe:/o:ruckussecurity:icx7650_series_firmware" :
        {"family" : "ICXSwitches", "versionEndIncluding" : "08.0.95r"},
    "cpe:/o:ruckussecurity:icx7750_series_firmware" :
        {"family" : "ICXSwitches", "versionEndIncluding" : "08.0.95r"},
    "cpe:/o:ruckussecurity:icx7850_series_firmware" :
        {"family" : "ICXSwitches", "versionEndIncluding" : "08.0.95r"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_HOLE);