Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-12262

Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component. IPNET security vulnerability: Handling of unsolicited Reverse ARP replies (Logical Flaw).

Published

2019-08-14T20:15:11.573

Last Modified

2024-11-21T04:22:30.967

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System windriver vxworks 6.6 Yes
Operating System windriver vxworks 6.7 Yes
Operating System windriver vxworks 6.8 Yes
Operating System windriver vxworks 6.9 Yes
Operating System windriver vxworks 7.0 Yes
Operating System belden hirschmann_hios ≤ 07.0.07 Yes
Hardware belden hirschmann_ees20 - No
Hardware belden hirschmann_ees25 - No
Hardware belden hirschmann_eesx20 - No
Hardware belden hirschmann_eesx30 - No
Hardware belden hirschmann_grs1020 - No
Hardware belden hirschmann_grs1030 - No
Hardware belden hirschmann_grs1042 - No
Hardware belden hirschmann_grs1120 - No
Hardware belden hirschmann_grs1130 - No
Hardware belden hirschmann_grs1142 - No
Hardware belden hirschmann_msp30 - No
Hardware belden hirschmann_msp32 - No
Hardware belden hirschmann_rail_switch_power_lite - No
Hardware belden hirschmann_rail_switch_power_smart - No
Hardware belden hirschmann_red25 - No
Hardware belden hirschmann_rsp20 - No
Hardware belden hirschmann_rsp25 - No
Hardware belden hirschmann_rsp30 - No
Hardware belden hirschmann_rsp35 - No
Hardware belden hirschmann_rspe30 - No
Hardware belden hirschmann_rspe32 - No
Hardware belden hirschmann_rspe35 - No
Hardware belden hirschmann_rspe37 - No
Operating System belden hirschmann_hios ≤ 07.5.01 Yes
Hardware belden hirschmann_msp40 - No
Hardware belden hirschmann_octopus_os3 - No
Operating System belden hirschmann_hios ≤ 07.2.04 Yes
Hardware belden hirschmann_dragon_mach4000 - No
Hardware belden hirschmann_dragon_mach4500 - No
Operating System belden hirschmann_hios ≤ 05.3.06 Yes
Hardware belden hirschmann_eagle_one - No
Hardware belden hirschmann_eagle20 - No
Hardware belden hirschmann_eagle30 - No
Operating System belden garrettcom_magnum_dx940e_firmware ≤ 1.0.1_y7 Yes
Hardware belden garrettcom_magnum_dx940e - No
Operating System siemens ruggedcom_win7000_firmware < bs5.2.461.17 Yes
Hardware siemens ruggedcom_win7000 - No
Operating System siemens ruggedcom_win7018_firmware < bs5.2.461.17 Yes
Hardware siemens ruggedcom_win7018 - No
Operating System siemens ruggedcom_win7025_firmware < bs5.2.461.17 Yes
Hardware siemens ruggedcom_win7025 - No
Operating System siemens ruggedcom_win7200_firmware < bs5.2.461.17 Yes
Hardware siemens ruggedcom_win7200 - No
References