CVE-2019-12263

Wind River VxWorks versions 6.9.4 and vx7 are affected by a buffer overflow in the TCP component (issue 4 of 4) within the IPNET security stack. The vulnerability is caused by a race condition leading to TCP Urgent Pointer state confusion . Impacted systems include Siemens SIPROTEC 4 7SJ66 (prior...

CVE-2019-12259

Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. There is an IPNET security vulnerability: DoS via NULL dereference in IGMP parsing...

CVE-2019-12259

CVE-2019-12259 affects Wind River VxWorks 6.6–6.9 and vx7, due to an array index error in the IGMPv3 client component causing a DoS via a NULL pointer dereference during IGMP parsing. Connected sources confirm the affected platform range and root cause (IPNET IGMP parsing error). The CISA/ICS adv...

CVE-2019-12256

Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET security vulnerability: Stack overflow in the parsing of IPv4 packets’ IP options...

CVE-2019-12256

CVE-2019-12256 affects Wind River VxWorks 6.9 and vx7 IPNET stack, with a Buffer Overflow in the IPv4 options parsing (IP options) that can crash a tNet0 task and lead to remote code execution. The vulnerability is classified with a high potential impact (CVSS v3 base 9.8: network access, no auth...

CVE-2019-12257

Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. There is an IPNET security vulnerability: Heap overflow in DHCP Offer/ACK parsing inside ipdhcpc...

CVE-2019-12257

CVE-2019-12257 affects Wind River VxWorks 6.6–6.9 via a heap-based buffer overflow in the IPnet DHCP client (ipdhcpc) during DHCP Offer/ACK parsing. Several connected advisories (Tenable OT plugins, ICS/CISA entries, and vendor briefs) confirm the vulnerability in the IPnet DHCP path and indicate...

PT-2019-4736 · Wind River · Vxworks

Name of the Vulnerable Software and Affected Versions: Wind River VxWorks versions 6.9.4 through vx7 Description: The issue is related to a TCP protocol vulnerability in Wind River VxWorks real-time operating systems, specifically concerning errors in the TCP Urgent Pointer state when a shared...

CVE-2019-12261: Buffer Copy without Checking Size of Input

Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component issue 3 of 4. This is an IPNET security vulnerability: TCP Urgent Pointer state confusion during connect to a remote host...

PT-2019-4738

Name of the Vulnerable Software and Affected Versions Wind River VxWorks versions 6.6 through 6.9 and vx7 Description The issue is related to an array index error in the IGMPv3 client component, which can lead to a denial of service DoS via NULL dereference in IGMP parsing. This can be exploited ...

PT-2019-4728 · Wind River · Vxworks

Name of the Vulnerable Software and Affected Versions: Wind River VxWorks versions 6.6 through 6.9 Description: The issue is related to a buffer overflow in the DHCP client component, specifically a heap overflow when parsing DHCP Offer/ACK inside ipdhcpc. This can be exploited by a remote attack...

PT-2019-4732 · Wind River · Vxworks

Name of the Vulnerable Software and Affected Versions: Wind River VxWorks versions 6.7 through 6.9 Wind River VxWorks version vx7 Description: The issue is related to errors in the TCP Urgent Pointer state during the "connect" operation to a remote host. Exploitation of this issue may allow a...

PT-2019-4743 · Wind River · Vxworks

Name of the Vulnerable Software and Affected Versions: Wind River VxWorks versions 6.5 through 6.9.4 Description: The issue is related to a memory leak in the IGMPv3 client component, which can lead to an information leak via IGMPv3 specific membership reports. This can potentially allow an...

PT-2019-4731 · Wind River · Vxworks

Name of the Vulnerable Software and Affected Versions: Wind River VxWorks versions 6.9 through vx7 Description: The issue is related to a Buffer Overflow in the TCP component, specifically a TCP Urgent Pointer state confusion caused by a malformed TCP AO option. This can be exploited by sending...

PT-2019-4737 · Wind River · Vxworks

Name of the Vulnerable Software and Affected Versions: Wind River VxWorks versions 6.6 through 7 Description: The issue is related to errors in forming TCP options in the TCP component, which can lead to a denial of service DoS of TCP connections via malformed TCP options. This can be exploited b...

CVE-2019-12256 - VxWorks IPv4 Options Buffer Overflow

This vulnerability can be triggered by a specially crafted IP packet sent to the target device, even as a broadcast or multicast packet. It does not require any specific application or configuration to be running on the device, and it affects any device running VxWorks v6.9.4 or above with a...

VxWorks is facing severe RCE attack risk-vulnerability warning-the black bar safety net

Armis research team in the VxWorks discovered 11 zero-day vulnerabilities, VxWorks may be the most widely used of theoperating system. VxWorks is more than 20 million devices in use, including critical industrial, medical and business equipment. Called the“URGENT/11,”the vulnerability exists in t...

PT-2019-4730

Name of the Vulnerable Software and Affected Versions Wind River VxWorks affected versions not specified Description The issue is related to a Buffer Overflow in the TCP component of Wind River VxWorks, which is caused by an integer underflow when the TCP Urgent Pointer is set to 0. This can be...

PT-2019-4741

Name of the Vulnerable Software and Affected Versions Wind River VxWorks versions 6.6 through 7 Description The issue is related to errors in handling unsolicited Reverse ARP replies, which is a logical flaw in the RARP protocol of Wind River VxWorks real-time operating systems. This can be...

CVE-2019-12259: NULL Pointer Dereference

Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. There is an IPNET security vulnerability: DoS via NULL dereference in IGMP parsing...