Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-12261

Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4). This is an IPNET security vulnerability: TCP Urgent Pointer state confusion during connect() to a remote host.

Security Impact Summary

This vulnerability carries a CRITICAL severity rating with a CVSS v3.1 score of 9.8, indicating it can be exploited remotely over the network with relatively low complexity without requiring user interaction and does not require pre-existing privileges . The vulnerability impacts confidentiality (data exposure), integrity (unauthorized modifications), and availability (service disruption) for affected systems. Impacting 51 products from windriver, from sonicwall, from siemens and 48 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

First disclosed in 2019, this vulnerability was reported during a period defined by widespread IoT adoption challenges, mobile security concerns, and the emergence of advanced persistent threat (APT) techniques. Contemporary mitigation strategies focused on secure development practices and third-party component vetting.

Published

2019-08-09T21:15:11.093

Last Modified

2024-11-21T04:22:30.777

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-120
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System windriver vxworks < 6.9.4.12 Yes
Operating System windriver vxworks 7.0 Yes
Operating System sonicwall sonicos ≤ 5.9.0.7 Yes
Operating System sonicwall sonicos ≤ 5.9.1.12 Yes
Operating System sonicwall sonicos ≤ 6.2.3.1 Yes
Operating System sonicwall sonicos ≤ 6.2.4.3 Yes
Operating System sonicwall sonicos ≤ 6.2.5.3 Yes
Operating System sonicwall sonicos ≤ 6.2.6.1 Yes
Operating System sonicwall sonicos ≤ 6.2.7.4 Yes
Operating System sonicwall sonicos ≤ 6.2.9.2 Yes
Operating System sonicwall sonicos ≤ 6.5.0.3 Yes
Operating System sonicwall sonicos ≤ 6.5.1.4 Yes
Operating System sonicwall sonicos ≤ 6.5.2.3 Yes
Operating System sonicwall sonicos ≤ 6.5.3.3 Yes
Operating System sonicwall sonicos ≤ 6.5.4.3 Yes
Operating System sonicwall sonicos 6.2.7.0 Yes
Operating System sonicwall sonicos 6.2.7.1 Yes
Operating System sonicwall sonicos 6.2.7.7 Yes
Operating System siemens siprotec_5_firmware < 7.59 Yes
Hardware siemens siprotec_5 - No
Operating System netapp e-series_santricity_os_controller ≤ 8.40.50.00 Yes
Operating System siemens siprotec_5_firmware < 7.91 Yes
Hardware siemens siprotec_5 - No
Operating System siemens power_meter_9410_firmware < 2.2.1 Yes
Hardware siemens power_meter_9410 - No
Operating System siemens power_meter_9810_firmware * Yes
Hardware siemens power_meter_9810 - No
Operating System siemens ruggedcom_win7000_firmware < bs5.2.461.17 Yes
Hardware siemens ruggedcom_win7000 - No
Operating System siemens ruggedcom_win7018_firmware < bs5.2.461.17 Yes
Hardware siemens ruggedcom_win7018 - No
Operating System siemens ruggedcom_win7025_firmware < bs5.2.461.17 Yes
Hardware siemens ruggedcom_win7025 - No
Operating System siemens ruggedcom_win7200_firmware < bs5.2.461.17 Yes
Hardware siemens ruggedcom_win7200 - No
Application oracle communications_eagle ≤ 46.8.2 Yes
Operating System belden hirschmann_hios ≤ 07.0.07 Yes
Hardware belden hirschmann_ees20 - No
Hardware belden hirschmann_ees25 - No
Hardware belden hirschmann_eesx20 - No
Hardware belden hirschmann_eesx30 - No
Hardware belden hirschmann_grs1020 - No
Hardware belden hirschmann_grs1030 - No
Hardware belden hirschmann_grs1042 - No
Hardware belden hirschmann_grs1120 - No
Hardware belden hirschmann_grs1130 - No
Hardware belden hirschmann_grs1142 - No
Hardware belden hirschmann_msp30 - No
Hardware belden hirschmann_msp32 - No
Hardware belden hirschmann_rail_switch_power_lite - No
Hardware belden hirschmann_rail_switch_power_smart - No
Hardware belden hirschmann_red25 - No
Hardware belden hirschmann_rsp20 - No
Hardware belden hirschmann_rsp25 - No
Hardware belden hirschmann_rsp30 - No
Hardware belden hirschmann_rsp35 - No
Hardware belden hirschmann_rspe30 - No
Hardware belden hirschmann_rspe32 - No
Hardware belden hirschmann_rspe35 - No
Hardware belden hirschmann_rspe37 - No
Operating System belden hirschmann_hios ≤ 07.5.01 Yes
Hardware belden hirschmann_msp40 - No
Hardware belden hirschmann_octopus_os3 - No
Operating System belden hirschmann_hios ≤ 07.2.04 Yes
Hardware belden hirschmann_dragon_mach4000 - No
Hardware belden hirschmann_dragon_mach4500 - No
Operating System belden hirschmann_hios ≤ 05.3.06 Yes
Hardware belden hirschmann_eagle_one - No
Hardware belden hirschmann_eagle20 - No
Hardware belden hirschmann_eagle30 - No
Operating System belden garrettcom_magnum_dx940e_firmware ≤ 1.0.1_y7 Yes
Hardware belden garrettcom_magnum_dx940e - No
References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For windriver's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.