CVE-2019-12263: Concurrent Execution using Shared Resource with Improper Synchronization

Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component issue 4 of 4. There is an IPNET security vulnerability: TCP Urgent Pointer state confusion due to race condition...

PT-2019-4731 · Wind River · Vxworks

Name of the Vulnerable Software and Affected Versions: Wind River VxWorks versions 6.9 through vx7 Description: The issue is related to a Buffer Overflow in the TCP component, specifically a TCP Urgent Pointer state confusion caused by a malformed TCP AO option. This can be exploited by sending...

PT-2019-4741

Name of the Vulnerable Software and Affected Versions Wind River VxWorks versions 6.6 through 7 Description The issue is related to errors in handling unsolicited Reverse ARP replies, which is a logical flaw in the RARP protocol of Wind River VxWorks real-time operating systems. This can be...

CVE-2019-12255: Buffer Copy without Checking Size of Input

Wind River VxWorks has a Buffer Overflow in the TCP component issue 1 of 4. This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow...

PT-2019-4730

Name of the Vulnerable Software and Affected Versions Wind River VxWorks affected versions not specified Description The issue is related to a Buffer Overflow in the TCP component of Wind River VxWorks, which is caused by an integer underflow when the TCP Urgent Pointer is set to 0. This can be...

CVE-2019-12258: Session Fixation

Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. This is a IPNET security vulnerability: DoS of TCP connection via malformed TCP options...

CVE-2019-12261: Buffer Copy without Checking Size of Input

Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component issue 3 of 4. This is an IPNET security vulnerability: TCP Urgent Pointer state confusion during connect to a remote host...

PT-2019-4728 · Wind River · Vxworks

Name of the Vulnerable Software and Affected Versions: Wind River VxWorks versions 6.6 through 6.9 Description: The issue is related to a buffer overflow in the DHCP client component, specifically a heap overflow when parsing DHCP Offer/ACK inside ipdhcpc. This can be exploited by a remote attack...

CVE-2019-12264

Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component...

CVE-2019-12264

Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component...

Design/Logic Flaw

Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component...

CVE-2019-12264

Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component...

CVE-2019-12264

CVE-2019-12264 affects Wind River VxWorks IPNet IP DHCP client (ipdhcpc) and allows Improper Neutralization of Argument Delimiters in a Command (Argument Injection) in IPv4 address assignment. Affected products include VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4 and VxWorks 7. Likely impact is memory/log...

PT-2019-4742

Name of the Vulnerable Software and Affected Versions Wind River VxWorks versions 6.6 through 6.9.4 Wind River VxWorks version 7 Description The issue is related to incorrect access control in IPv4 assignment by the ipdhcpc DHCP client component. This can allow an attacker to impact the integrity...

CVE-2019-12264: Improper Neutralization of Argument Delimiters in a Command

Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component...

URGENT/11: VxWorks RTOS 11 0 day vulnerabilities affect 20 million device-bug warning-the black bar safety net

Armis Labs security researchers recently in the currently most widely used embedded devices in real timeoperating system real-time operating systems, RTOS）VxWorks found 11 a 0 day vulnerability, theoperating systemis widely used in aerospace, defense, industrial, medical, electronic, network, and...

Wind River Systems VxWorks Competitive Conditions Issue Vulnerability

Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems. A competitive conditions issue vulnerability exists in Wind River Systems VxWorks. The vulnerability arises from improper handling of concurrent access when concurrent code requires mutually exclusi...

Wind River Systems VxWorks Parameter Denial of Service Vulnerability

Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems. A parameter injection vulnerability exists in Wind River Systems VxWorks. An attacker could exploit this vulnerability to cause a denial of service via malformed TCP options...

Wind River Systems VxWorks Parameter Injection Vulnerability (CNVD-2019-25702)

Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems. A parameter injection vulnerability exists in Wind River Systems VxWorks. An attacker could exploit this vulnerability by sending a reverse ARP response to an affected system to assign a unicast IPv...

Wind River Systems VxWorks Numeric Error Vulnerability

Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems. A numeric error vulnerability exists in Wind River Systems VxWorks. An attacker could exploit this vulnerability to execute code...