← Back

CVE-2015-3963

nvd nist
Published: Aug 4, 2015Modified: May 6, 2026

JSON object

Loading...
5.8
Vector
AV:N/AC:M/Au:N/C:N/I:P/A:P
Exploitability: 8.6 / Impact: 4.9
Source: NVD

Description

Wind River VxWorks before 5.5.1, 6.5.x through 6.7.x before 6.7.1.1, 6.8.x before 6.8.3, 6.9.x before 6.9.4.4, and 7.x before 7 ipnet_coreip 1.2.2.0, as used on Schneider Electric SAGE RTU devices before J2 and other devices, does not properly generate TCP initial sequence number (ISN) values, which makes it easier for remote attackers to spoof TCP sessions by predicting an ISN value.

Affected (8)

Products: Windriver: Vxworks
Windriver
1 product
Vxworks
Configuration A
8 vulnerable · 13 platform
Vulnerable SoftwareAffected Versions
Windriver
Vxworks
From 6.5 to 6.6
Vxworks
From 6.7 to 6.7.1.1
Vxworks
From 6.8 to 6.8.3
Vxworks
From 6.9 to 6.9.4.4
Vxworks
Version 6.6.3
Vxworks
Version 6.6.4.1
Vxworks
Version 6.6.4
Vxworks
Version 7.0
Running on/withPlatform Versions
Schneider Electric
Sage 1210
All versions
Schneider Electric
Sage 1230
All versions
Schneider Electric
Sage 1250
All versions
Schneider Electric
Sage 1310
All versions
Schneider Electric
Sage 1330
All versions
Schneider Electric
Sage 1350
All versions
Schneider Electric
Sage 1410
All versions
Schneider Electric
Sage 1430
All versions
Schneider Electric
Sage 1450
All versions
Schneider Electric
Sage 2200
All versions
Schneider Electric
Sage 2400
All versions
Schneider Electric
Sage 3030
All versions
Schneider Electric
Sage 3030 Magnum
All versions

Related CWEs

CWE-330
Use of Insufficiently Random Values
The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.

References (14)

Source: ics-cert@hq.dhs.gov
PatchThird Party Advisory
Source: ics-cert@hq.dhs.gov
Third Party AdvisoryVDB Entry
Source: ics-cert@hq.dhs.gov
Third Party AdvisoryVDB Entry
Source: ics-cert@hq.dhs.gov
Third Party AdvisoryVDB Entry
Source: ics-cert@hq.dhs.gov
Third Party AdvisoryUS Government Resource
Source: ics-cert@hq.dhs.gov
Third Party AdvisoryUS Government Resource
Source: ics-cert@hq.dhs.gov
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.