Hirschmann HiOS Switches Null Pointer Dereference (CVE-2019-12259)

This vulnerability requires that at least one IPv4 multicast address has been assigned to the target in an incorrect way e.g., using the API intended for assigning unicast-addresses. An attacker may use CVE-2019-12264 to incorrectly assign a multicast IP-address. An attacker on the same LAN as th...

CVE-2019-12259

Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. There is an IPNET security vulnerability: DoS via NULL dereference in IGMP parsing...

CVE-2019-12259

CVE-2019-12259 affects Wind River VxWorks 6.6–6.9 and vx7, due to an array index error in the IGMPv3 client component causing a DoS via a NULL pointer dereference during IGMP parsing. Connected sources confirm the affected platform range and root cause (IPNET IGMP parsing error). The CISA/ICS adv...

Xerox WorkCentre Multiple Vulnerabilities (XRX19-016) (URGENT/11)

According to its self-reported version, the remote Xerox WorkCentre is affected by multiple remote code execution and denial-of-service vulnerabilities in the IPnet TCP/IP stack. An unauthenticated, remote, attacker could leverage these vulnerabilities to gain full access to the affected device o...