Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-12264

Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component.

Published

2019-08-05T18:15:10.863

Last Modified

2024-11-21T04:22:31.333

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.1 (HIGH)

CVSSv2 Vector

AV:A/AC:L/Au:N/C:N/I:P/A:P

  • Access Vector: ADJACENT_NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

6.5

Impact Score

4.9

Weaknesses
  • Type: Primary
    CWE-88
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System windriver vxworks 6.6 Yes
Operating System windriver vxworks 6.7 Yes
Operating System windriver vxworks 6.8 Yes
Operating System windriver vxworks 6.9.3 Yes
Operating System windriver vxworks 6.9.4 Yes
Operating System windriver vxworks 7.0 Yes
Operating System belden hirschmann_hios ≤ 07.0.07 Yes
Hardware belden hirschmann_ees20 - No
Hardware belden hirschmann_ees25 - No
Hardware belden hirschmann_eesx20 - No
Hardware belden hirschmann_eesx30 - No
Hardware belden hirschmann_grs1020 - No
Hardware belden hirschmann_grs1030 - No
Hardware belden hirschmann_grs1042 - No
Hardware belden hirschmann_grs1120 - No
Hardware belden hirschmann_grs1130 - No
Hardware belden hirschmann_grs1142 - No
Hardware belden hirschmann_msp30 - No
Hardware belden hirschmann_msp32 - No
Hardware belden hirschmann_rail_switch_power_lite - No
Hardware belden hirschmann_rail_switch_power_smart - No
Hardware belden hirschmann_red25 - No
Hardware belden hirschmann_rsp20 - No
Hardware belden hirschmann_rsp25 - No
Hardware belden hirschmann_rsp30 - No
Hardware belden hirschmann_rsp35 - No
Hardware belden hirschmann_rspe30 - No
Hardware belden hirschmann_rspe32 - No
Hardware belden hirschmann_rspe35 - No
Hardware belden hirschmann_rspe37 - No
Operating System belden hirschmann_hios ≤ 07.5.01 Yes
Hardware belden hirschmann_msp40 - No
Hardware belden hirschmann_octopus_os3 - No
Operating System belden hirschmann_hios ≤ 07.2.04 Yes
Hardware belden hirschmann_dragon_mach4000 - No
Hardware belden hirschmann_dragon_mach4500 - No
Operating System belden hirschmann_hios ≤ 05.3.06 Yes
Hardware belden hirschmann_eagle_one - No
Hardware belden hirschmann_eagle20 - No
Hardware belden hirschmann_eagle30 - No
Operating System belden garrettcom_magnum_dx940e_firmware ≤ 1.0.1_y7 Yes
Hardware belden garrettcom_magnum_dx940e - No
Operating System siemens ruggedcom_win7000_firmware < bs5.2.461.17 Yes
Hardware siemens ruggedcom_win7000 - No
Operating System siemens ruggedcom_win7018_firmware < bs5.2.461.17 Yes
Hardware siemens ruggedcom_win7018 - No
Operating System siemens ruggedcom_win7025_firmware < bs5.2.461.17 Yes
Hardware siemens ruggedcom_win7025 - No
Operating System siemens ruggedcom_win7200_firmware < bs5.2.461.17 Yes
Hardware siemens ruggedcom_win7200 - No
References