CVE-2019-12259

CVE-2019-12259 affects Wind River VxWorks 6.6–6.9 and vx7, due to an array index error in the IGMPv3 client component causing a DoS via a NULL pointer dereference during IGMP parsing. Connected sources confirm the affected platform range and root cause (IPNET IGMP parsing error). The CISA/ICS adv...

CVE-2019-12259

Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. There is an IPNET security vulnerability: DoS via NULL dereference in IGMP parsing...

CVE-2019-12256

Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET security vulnerability: Stack overflow in the parsing of IPv4 packets’ IP options...

CVE-2019-12256

CVE-2019-12256 affects Wind River VxWorks 6.9 and vx7 IPNET stack, with a Buffer Overflow in the IPv4 options parsing (IP options) that can crash a tNet0 task and lead to remote code execution. The vulnerability is classified with a high potential impact (CVSS v3 base 9.8: network access, no auth...

CVE-2019-12257

Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. There is an IPNET security vulnerability: Heap overflow in DHCP Offer/ACK parsing inside ipdhcpc...

CVE-2019-12257

CVE-2019-12257 affects Wind River VxWorks 6.6–6.9 via a heap-based buffer overflow in the IPnet DHCP client (ipdhcpc) during DHCP Offer/ACK parsing. Several connected advisories (Tenable OT plugins, ICS/CISA entries, and vendor briefs) confirm the vulnerability in the IPnet DHCP path and indicate...

CVE-2019-12258: Session Fixation

Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. This is a IPNET security vulnerability: DoS of TCP connection via malformed TCP options...

PT-2019-4743 · Wind River · Vxworks

Name of the Vulnerable Software and Affected Versions: Wind River VxWorks versions 6.5 through 6.9.4 Description: The issue is related to a memory leak in the IGMPv3 client component, which can lead to an information leak via IGMPv3 specific membership reports. This can potentially allow an...

PT-2019-4728 · Wind River · Vxworks

Name of the Vulnerable Software and Affected Versions: Wind River VxWorks versions 6.6 through 6.9 Description: The issue is related to a buffer overflow in the DHCP client component, specifically a heap overflow when parsing DHCP Offer/ACK inside ipdhcpc. This can be exploited by a remote attack...

PT-2019-4731 · Wind River · Vxworks

Name of the Vulnerable Software and Affected Versions: Wind River VxWorks versions 6.9 through vx7 Description: The issue is related to a Buffer Overflow in the TCP component, specifically a TCP Urgent Pointer state confusion caused by a malformed TCP AO option. This can be exploited by sending...

CVE-2019-12263: Concurrent Execution using Shared Resource with Improper Synchronization

Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component issue 4 of 4. There is an IPNET security vulnerability: TCP Urgent Pointer state confusion due to race condition...

CVE-2019-12260: Buffer Copy without Checking Size of Input

Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component issue 2 of 4. This is an IPNET security vulnerability: TCP Urgent Pointer state confusion caused by a malformed TCP AO option...

CVE-2019-12259: NULL Pointer Dereference

Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. There is an IPNET security vulnerability: DoS via NULL dereference in IGMP parsing...

CVE-2019-12256: Buffer Copy without Checking Size of Input

Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET security vulnerability: Stack overflow in the parsing of IPv4 packets’ IP options...

CVE-2019-12257: Buffer Copy without Checking Size of Input

Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. There is an IPNET security vulnerability: Heap overflow in DHCP Offer/ACK parsing inside ipdhcpc...

PT-2019-4732 · Wind River · Vxworks

Name of the Vulnerable Software and Affected Versions: Wind River VxWorks versions 6.7 through 6.9 Wind River VxWorks version vx7 Description: The issue is related to errors in the TCP Urgent Pointer state during the "connect" operation to a remote host. Exploitation of this issue may allow a...

PT-2019-4736 · Wind River · Vxworks

Name of the Vulnerable Software and Affected Versions: Wind River VxWorks versions 6.9.4 through vx7 Description: The issue is related to a TCP protocol vulnerability in Wind River VxWorks real-time operating systems, specifically concerning errors in the TCP Urgent Pointer state when a shared...

CVE-2019-12255: Buffer Copy without Checking Size of Input

Wind River VxWorks has a Buffer Overflow in the TCP component issue 1 of 4. This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow...

CVE-2019-12265: Missing Release of Memory after Effective Lifetime

Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There is an IPNET security vulnerability: IGMP Information leak via IGMPv3 specific membership report...

URGENT/11 Scanner, Based on Detection Tool by Armis

This module detects VxWorks and the IPnet IP stack, along with devices vulnerable to CVE-2019-12258. Module Options msf use auxiliary/scanner/vxworks/urgent11/check msf undefinedcheck show actions ...actions... msf undefinedcheck set ACTION msf undefinedcheck show options ...show and set options...