CVE-2019-12255

CVE-2019-12255 affects Wind River VxWorks IPnet TCP/IP Stack . The issue is a buffer/overflow condition in the TCP component caused by an incorrect handling of the TCP Urgent Pointer being 0, leading to an integer underflow and potential remote code execution. It is one of a set of multiple URGEN...

CVE-2019-12258

CVE-2019-12258 affects Wind River VxWorks 6.6–vx7 via the IPNet TCP stack, causing a session-fixation vulnerability that can lead to a TCP DoS from malformed TCP options. Public sources describe this as part of the URGENT/11 set and note the related IPNet flaws across IPv4/TCP handling. Mitigatio...

CVE-2019-12261

CVE-2019-12261 is a Wind River VxWorks IPNet TCP vulnerability (6.7–6.9 and vx7) with a Buffer Overflow in the TCP component caused by TCP Urgent Pointer state confusion during connect() to a remote host. The connected documents identify the affected platform, the issue type, and the root cause, ...

CVE-2019-12260

CVE-2019-12260 affects Wind River VxWorks 6.9 and vx7, in the IPNet TCP stack. The issue is a buffer overflow in the TCP component caused by a malformed TCP AO option leading to a TCP Urgent Pointer state confusion. Public sources describe potential for remote code execution or crashes via crafte...

CVE-2019-12263

Wind River VxWorks 6.9.4 and vx7 are affected by CVE-2019-12263, a race-condition in the IPNet TCP stack’s Urgent Pointer handling that can trigger a buffer overflow in TCP processing. Exploitation could lead to remote code execution or crash of affected TCP endpoints, per multiple advisories (CI...

CVE-2019-12259

CVE-2019-12259 affects Wind River VxWorks 6.6–6.9 and vx7, due to an array index error in the IGMPv3 client component causing a DoS via a NULL pointer dereference during IGMP parsing. Connected sources confirm the affected platform range and root cause (IPNET IGMP parsing error). The CISA/ICS adv...

CVE-2019-12265

CVE-2019-12265 affects Wind River VxWorks IGMPv3 client by a memory leak in the IGMPv3 membership report handling, leading to a potential information leak. The vulnerability is in the IPNET stack and is part of the URGENT/11 set of issues affecting VxWorks 6.5–6.9.4 (and related VXWorks variants)...

CVE-2020-6994

CVE-2020-6994 is a buffer/overflow vulnerability in Hirschmann HiOS and HiSecOS caused by improper parsing of URL arguments. A remote attacker could craft HTTP requests to overflow an internal buffer, potentially fully compromising affected devices. Affected products include HiOS 07.0.02 and olde...

CVE-2019-12256

CVE-2019-12256 affects Wind River VxWorks 6.9 and vx7 IPNET stack, with a Buffer Overflow in the IPv4 options parsing (IP options) that can crash a tNet0 task and lead to remote code execution. The vulnerability is classified with a high potential impact (CVSS v3 base 9.8: network access, no auth...

CVE-2019-12257

CVE-2019-12257 affects Wind River VxWorks 6.6–6.9 via a heap-based buffer overflow in the IPnet DHCP client (ipdhcpc) during DHCP Offer/ACK parsing. Several connected advisories (Tenable OT plugins, ICS/CISA entries, and vendor briefs) confirm the vulnerability in the IPnet DHCP path and indicate...

CVE-2019-12262

CVE-2019-12262 affects Wind River VxWorks (6.6–7) IPNET TCP/IP stack, specifically the RARP client’s improper access control handling of unsolicited Reverse ARP replies. This logical flaw can enable remote exploitation over affected networks. Vendors have released advisories and patches; apply th...

CVE-2019-12264

CVE-2019-12264 affects Wind River VxWorks IPNet IP DHCP client (ipdhcpc) and allows Improper Neutralization of Argument Delimiters in a Command (Argument Injection) in IPv4 address assignment. Affected products include VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4 and VxWorks 7. Likely impact is memory/log...

CVE-2021-27734

CVE-2021-27734 affects Hirschmann HiOS 07.1.01, 07.1.02, 08.1.00–08.5.xx and HiSecOS 03.3.00–03.5.01, allowing remote attackers to change credentials of existing users. Descriptions span NVD, Red Hat, Nessus plugin and CNNVD; no exploit specifics are provided in the connected documents. CVSS v3.1...

CVE-2020-9307

CVE-2020-9307 affects Hirschmann OS2, RSP, and RSPE devices prior to HiOS 08.3.00. An unauthenticated, adjacent attacker can cause an infinite loop on an HSR ring port, breaking the redundancy of the HSR ring; if two devices are targeted, the ring can split into two isolated segments, disrupting ...