CVE-2019-12255 (GCVE-0-2019-12255)

Vulnerability from cvelistv5 – Published: 2019-08-09 19:18 – Updated: 2024-08-04 23:17
VLAI
Summary
Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow.
Severity
9.8 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE
  • n/a
Assigner
References
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T23:17:39.534Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support2.windriver.com/index.php?page=security-notices"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20190802-0001/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support2.windriver.com/index.php?page=cve\u0026on=view\u0026id=CVE-2019-12255"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/154022/VxWorks-6.8-Integer-Underflow.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K41190253"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K41190253?utm_source=f5support\u0026amp%3Butm_medium=RSS"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-05-12T12:06:20.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support2.windriver.com/index.php?page=security-notices"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20190802-0001/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support2.windriver.com/index.php?page=cve\u0026on=view\u0026id=CVE-2019-12255"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/154022/VxWorks-6.8-Integer-Underflow.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K41190253"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K41190253?utm_source=f5support\u0026amp%3Butm_medium=RSS"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-12255",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support2.windriver.com/index.php?page=security-notices",
              "refsource": "MISC",
              "url": "https://support2.windriver.com/index.php?page=security-notices"
            },
            {
              "name": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009",
              "refsource": "CONFIRM",
              "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20190802-0001/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20190802-0001/"
            },
            {
              "name": "https://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/",
              "refsource": "CONFIRM",
              "url": "https://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/"
            },
            {
              "name": "https://support2.windriver.com/index.php?page=cve\u0026on=view\u0026id=CVE-2019-12255",
              "refsource": "MISC",
              "url": "https://support2.windriver.com/index.php?page=cve\u0026on=view\u0026id=CVE-2019-12255"
            },
            {
              "name": "http://packetstormsecurity.com/files/154022/VxWorks-6.8-Integer-Underflow.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/154022/VxWorks-6.8-Integer-Underflow.html"
            },
            {
              "name": "https://support.f5.com/csp/article/K41190253",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/csp/article/K41190253"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf"
            },
            {
              "name": "https://support.f5.com/csp/article/K41190253?utm_source=f5support\u0026amp;utm_medium=RSS",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/csp/article/K41190253?utm_source=f5support\u0026amp;utm_medium=RSS"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-12255",
    "datePublished": "2019-08-09T19:18:03.000Z",
    "dateReserved": "2019-05-21T00:00:00.000Z",
    "dateUpdated": "2024-08-04T23:17:39.534Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2019-12255",
      "date": "2026-06-04",
      "epss": "0.82215",
      "percentile": "0.99236"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2019-12255\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2019-08-09T20:15:11.347\",\"lastModified\":\"2024-11-21T04:22:29.610\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow.\"},{\"lang\":\"es\",\"value\":\"Wind River VxWorks presenta un desbordamiento de b\u00fafer en el componente TCP (problema 1 de 4). Esta es una vulnerabilidad de seguridad de IPNET: TCP Urgent Pointer = 0 que conduce a un desbordamiento de enteros.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:P\",\"baseScore\":7.5,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-120\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:windriver:vxworks:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.5\",\"versionEndExcluding\":\"6.9.4\",\"matchCriteriaId\":\"326AA5C8-31F6-4107-93AF-1F64C1D9129E\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"8.00\",\"versionEndIncluding\":\"8.40.50.00\",\"matchCriteriaId\":\"2E243199-8506-4F65-9C22-2CBD50208F0D\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.9.0.0\",\"versionEndIncluding\":\"5.9.0.7\",\"matchCriteriaId\":\"16C417C4-DC9B-48A8-AEAE-755BCC2DA389\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.9.1.0.\",\"versionEndIncluding\":\"5.9.1.12\",\"matchCriteriaId\":\"3F047B55-4AAB-438D-BBF2-A0BAD4A5AFB2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2.0.0\",\"versionEndIncluding\":\"6.2.3.1\",\"matchCriteriaId\":\"90EA3BDF-084B-4D67-B0EF-4D27CA0EF283\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2.4.0\",\"versionEndIncluding\":\"6.2.4.3\",\"matchCriteriaId\":\"D59A1A87-D7B3-4F38-A83E-8CBF0A55A476\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2.5.0\",\"versionEndIncluding\":\"6.2.5.3\",\"matchCriteriaId\":\"C306A1CA-3A13-4085-A481-25A6B2D2412A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2.6.0\",\"versionEndIncluding\":\"6.2.6.1\",\"matchCriteriaId\":\"819517C6-9288-45B1-96B0-90B05AA5F3C4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2.7.0\",\"versionEndIncluding\":\"6.2.7.4\",\"matchCriteriaId\":\"31148F5D-C86F-463D-9A5B-9D82515EF901\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2.9.0\",\"versionEndIncluding\":\"6.2.9.2\",\"matchCriteriaId\":\"24520D09-E8D2-43BE-A4D3-19FE828A4309\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.5.0.0\",\"versionEndIncluding\":\"6.5.0.3\",\"matchCriteriaId\":\"DF416ABF-027E-4571-A81C-36280BFAA1F1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.5.1.0\",\"versionEndIncluding\":\"6.5.1.4\",\"matchCriteriaId\":\"8C253EDA-69CE-4C3A-9ABF-A7C55CEFA29C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.5.2.0\",\"versionEndIncluding\":\"6.5.2.3\",\"matchCriteriaId\":\"70C43F8A-0B85-4042-B691-8FDC841A3C2B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.5.3.0\",\"versionEndIncluding\":\"6.5.3.3\",\"matchCriteriaId\":\"1F26B212-EE89-485A-A414-553C0F39DCA3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.5.4.0.\",\"versionEndIncluding\":\"6.5.4.3\",\"matchCriteriaId\":\"E6BA5213-EA5E-423B-9207-E06AED2917B3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sonicwall:sonicos:6.2.7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7BC6DEEC-5FB4-4017-B8F0-99A17AD93A52\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sonicwall:sonicos:6.2.7.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DA6DA86B-D7E7-48E6-B841-206B9501DA67\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sonicwall:sonicos:6.2.7.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D0A2A903-3092-40FB-99FE-B864C52D343E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:siprotec_5_firmware:*:*:*:*:*:*:*:cp300\",\"versionEndExcluding\":\"7.91\",\"matchCriteriaId\":\"00314478-416E-488B-ADBF-DDED873ABE41\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:siprotec_5:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6E0F0E17-7BE6-40B8-985B-DF2F5F9D2CA7\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:siprotec_5_firmware:*:*:*:*:*:*:*:cp200\",\"matchCriteriaId\":\"E6E95365-D4D4-4666-8DB9-8AF782121CDF\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:siemens:siprotec_5:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4732E0B8-AF15-4C24-A3D4-8826E0440FDF\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:siprotec_5_firmware:*:*:*:*:*:*:*:cp300\",\"matchCriteriaId\":\"A4A621F2-33F1-4DB5-AF4D-BBEAAD7920B4\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:siemens:siprotec_5:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4732E0B8-AF15-4C24-A3D4-8826E0440FDF\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:power_meter_9410_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.2.1\",\"matchCriteriaId\":\"E9995922-9A9F-45B0-A982-3BC1D92B76D8\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:power_meter_9410:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7900C33F-1C31-4A6F-B98C-EF0A8E64F241\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:power_meter_9810_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6FCC4AE0-E5A4-4B83-80E3-037FB836A9DA\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:power_meter_9810:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BB5144E0-9082-497E-8958-6B85FDDD6C63\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:ruggedcom_win7000_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"bs5.2.461.17\",\"matchCriteriaId\":\"47C998D1-9DD5-4470-9241-174170541408\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:ruggedcom_win7000:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BD6F6C12-9373-48F2-B576-C9AC7A287B53\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:ruggedcom_win7018_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"bs5.2.461.17\",\"matchCriteriaId\":\"8216AFC1-213B-4E31-8660-5161E08A7C4E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:ruggedcom_win7018:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FC0F5DBF-4730-40CE-B9CE-DD4DA31D3ED6\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:ruggedcom_win7025_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"bs5.2.461.17\",\"matchCriteriaId\":\"AE5D7B8D-E74F-4839-8839-23894307992D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:ruggedcom_win7025:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"63967CFD-D35C-4793-858A-032C44E282F9\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:ruggedcom_win7200_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"bs5.2.461.17\",\"matchCriteriaId\":\"AD25C864-C272-45B7-8EC5-9120DF6A2072\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:ruggedcom_win7200:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F7146409-09B7-499C-9544-361B234E952D\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:belden:hirschmann_hios:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"07.0.07\",\"matchCriteriaId\":\"3950CA89-B400-427C-B6F2-54337AB694E0\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:belden:hirschmann_ees20:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D35A90AD-034E-434A-B989-4F871E0AD9A5\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:belden:hirschmann_ees25:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F3EF7BBA-2BCC-4A16-BBEE-E67CE8F95BE4\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:belden:hirschmann_eesx20:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"76F453AF-21B0-4611-95D7-88AD821632E8\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:belden:hirschmann_eesx30:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BE6A655D-ED55-4344-9F75-5995371C87C3\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:belden:hirschmann_grs1020:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"29576107-85D0-4877-875F-7F60EFDB803D\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:belden:hirschmann_grs1030:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FF6200A3-7B4F-4A8E-B9DC-EE6A82093C20\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:belden:hirschmann_grs1042:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEBA19D8-8B2D-4AD0-AA77-A3139C33F44D\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:belden:hirschmann_grs1120:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1B4F7FEA-BB1F-405E-A047-87D0BF0DF054\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:belden:hirschmann_grs1130:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"641912E2-C368-4438-8D5C-F6615B9FDABC\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:belden:hirschmann_grs1142:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F86BB5E8-4499-4E4F-AE5E-1471B297C16F\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:belden:hirschmann_msp30:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E89FAE18-5B44-4203-ABFD-BC40AF7E51BE\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:belden:hirschmann_msp32:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8D0DFE2E-2356-46D6-B2D9-89FD907CA168\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:belden:hirschmann_rail_switch_power_lite:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FDE06D94-B686-4468-86CF-AA68BB5CFEF4\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:belden:hirschmann_rail_switch_power_smart:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BC6487F7-284A-40C2-B70D-9380AD2A47C1\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:belden:hirschmann_red25:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"79354FA2-4C48-4506-94BE-7B9ECB18015D\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:belden:hirschmann_rsp20:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DED918F8-041E-4FFC-AFE8-484828696EDB\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:belden:hirschmann_rsp25:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4ED7974C-BBE6-4BAE-8962-7B5638C7AE20\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:belden:hirschmann_rsp30:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5EE16D46-7BA9-43D4-BB4E-1B638CE6C41B\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:belden:hirschmann_rsp35:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"165B837A-EF09-489F-BD7C-54107F491BC8\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:belden:hirschmann_rspe30:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C06BF302-8E62-41DB-AA67-6369527B598F\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:belden:hirschmann_rspe32:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"56D29DAB-C5D6-4539-86E4-43624FB957A9\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:belden:hirschmann_rspe35:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"305A9B3E-786C-4F8E-BE36-B4ED84650288\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:belden:hirschmann_rspe37:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4CBC8B88-4EC3-4827-B100-3A5A91B29CC2\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:belden:hirschmann_hios:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"07.5.01\",\"matchCriteriaId\":\"2681FAC3-1E59-497A-9931-F4059F84EF86\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:belden:hirschmann_msp40:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E92390DF-BFCC-4F30-88A0-33F63CA9B1B3\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:belden:hirschmann_octopus_os3:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A18D078E-1F1A-4DE5-AE43-840D96BE1C6C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:belden:hirschmann_hios:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"07.2.04\",\"matchCriteriaId\":\"98C84F5B-72F6-4059-B634-80EE072D0DF9\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:belden:hirschmann_dragon_mach4000:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5E0562EC-4942-4D14-A634-8A6A5FDB9561\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:belden:hirschmann_dragon_mach4500:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"79E8B334-8109-4664-8DCC-10876BD702DC\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:belden:hirschmann_hios:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.3.06\",\"matchCriteriaId\":\"CFB09BFE-D6C9-4433-A53A-F79608BFACA9\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:belden:hirschmann_eagle_one:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2D6D7B3E-90AD-43D9-9192-453A37921E8F\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:belden:hirschmann_eagle20:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"771189D9-34F0-400D-938B-2AA218C28C43\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:belden:hirschmann_eagle30:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3DCF228A-F3A8-4B36-A105-04E88980BA76\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:belden:garrettcom_magnum_dx940e_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.0.1_y7\",\"matchCriteriaId\":\"BE3BDD99-1DFA-4037-8E77-902F39842153\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:belden:garrettcom_magnum_dx940e:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E9B635F0-96C1-49DA-957C-2ECD55A316C0\"}]}]}],\"references\":[{\"url\":\"http://packetstormsecurity.com/files/154022/VxWorks-6.8-Integer-Underflow.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20190802-0001/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.f5.com/csp/article/K41190253\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.f5.com/csp/article/K41190253?utm_source=f5support\u0026amp%3Butm_medium=RSS\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://support2.windriver.com/index.php?page=cve\u0026on=view\u0026id=CVE-2019-12255\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support2.windriver.com/index.php?page=security-notices\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Vendor Advisory\"]},{\"url\":\"https://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://packetstormsecurity.com/files/154022/VxWorks-6.8-Integer-Underflow.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20190802-0001/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.f5.com/csp/article/K41190253\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.f5.com/csp/article/K41190253?utm_source=f5support\u0026amp%3Butm_medium=RSS\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://support2.windriver.com/index.php?page=cve\u0026on=view\u0026id=CVE-2019-12255\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support2.windriver.com/index.php?page=security-notices\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Vendor Advisory\"]},{\"url\":\"https://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.