CVE-2019-12262

Published: Aug 14, 2019Modified: Nov 21, 2024

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component. IPNET security vulnerability: Handling of unsolicited Reverse ARP replies (Logical Flaw).

Affected (14)

Products: Windriver: Vxworks · Belden: Hirschmann Hios, Garrettcom Magnum Dx940e Firmware · Siemens: Ruggedcom Win7000 Firmware, Ruggedcom Win7018 Firmware, Ruggedcom Win7025 Firmware, Ruggedcom Win7200 Firmware

1 product

2 products

Garrettcom Magnum Dx940e Firmware

Siemens

4 products

Ruggedcom Win7000 Firmware

Ruggedcom Win7018 Firmware

Ruggedcom Win7025 Firmware

Ruggedcom Win7200 Firmware

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Windriver Vxworks	Version 6.6
Windriver Vxworks	Version 6.7
Windriver Vxworks	Version 6.8
Windriver Vxworks	Version 6.9
Windriver Vxworks	Version 7.0

Configuration B

1 vulnerable · 23 platform

Vulnerable Software	Affected Versions
Belden Hirschmann Hios	Up to 07.0.07

Running on/with	Platform Versions
Belden Hirschmann Ees20	All versions
Belden Hirschmann Ees25	All versions
Belden Hirschmann Eesx20	All versions
Belden Hirschmann Eesx30	All versions
Belden Hirschmann Grs1020	All versions
Belden Hirschmann Grs1030	All versions
Belden Hirschmann Grs1042	All versions
Belden Hirschmann Grs1120	All versions
Belden Hirschmann Grs1130	All versions
Belden Hirschmann Grs1142	All versions
Belden Hirschmann Msp30	All versions
Belden Hirschmann Msp32	All versions
Belden Hirschmann Rail Switch Power Lite	All versions
Belden Hirschmann Rail Switch Power Smart	All versions
Belden Hirschmann Red25	All versions
Belden Hirschmann Rsp20	All versions
Belden Hirschmann Rsp25	All versions
Belden Hirschmann Rsp30	All versions
Belden Hirschmann Rsp35	All versions
Belden Hirschmann Rspe30	All versions
Belden Hirschmann Rspe32	All versions
Belden Hirschmann Rspe35	All versions
Belden Hirschmann Rspe37	All versions

Configuration C

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Belden Hirschmann Hios	Up to 07.5.01

Running on/with	Platform Versions
Belden Hirschmann Msp40	All versions
Belden Hirschmann Octopus Os3	All versions

Configuration D

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Belden Hirschmann Hios	Up to 07.2.04

Running on/with	Platform Versions
Belden Hirschmann Dragon Mach4000	All versions
Belden Hirschmann Dragon Mach4500	All versions

Configuration E

1 vulnerable · 3 platform

Vulnerable Software	Affected Versions
Belden Hirschmann Hios	Up to 05.3.06

Running on/with	Platform Versions
Belden Hirschmann Eagle20	All versions
Belden Hirschmann Eagle30	All versions
Belden Hirschmann Eagle One	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Belden Garrettcom Magnum Dx940e Firmware	Up to 1.0.1_y7

Running on/with	Platform Versions
Belden Garrettcom Magnum Dx940e	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Win7000 Firmware	Before bs5.2.461.17

Running on/with	Platform Versions
Siemens Ruggedcom Win7000	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Win7018 Firmware	Before bs5.2.461.17

Running on/with	Platform Versions
Siemens Ruggedcom Win7018	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Win7025 Firmware	Before bs5.2.461.17

Running on/with	Platform Versions
Siemens Ruggedcom Win7025	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Win7200 Firmware	Before bs5.2.461.17

Running on/with	Platform Versions
Siemens Ruggedcom Win7200	All versions

References (8)

https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf

Source: cve@mitre.org

Third Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf

Source: cve@mitre.org

Third Party Advisory

https://support.f5.com/csp/article/K41190253

Source: cve@mitre.org

Third Party Advisory

https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12262

Source: cve@mitre.org

Vendor Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://support.f5.com/csp/article/K41190253

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12262

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.