9.8

CVE-2019-12256

Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET security vulnerability: Stack overflow in the parsing of IPv4 packets’ IP options.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Windriver ≫ Vxworks Version >= 6.5 < 6.9.4.12
Netapp ≫ E-series Santricity Os Controller Version >= 8.00 <= 8.40.50.00
Sonicwall ≫ Sonicos Version >= 5.9.0.0 <= 5.9.0.7
Sonicwall ≫ Sonicos Version >= 5.9.1.0. <= 5.9.1.12
Sonicwall ≫ Sonicos Version >= 6.2.0.0 <= 6.2.3.1
Sonicwall ≫ Sonicos Version >= 6.2.4.0 <= 6.2.4.3
Sonicwall ≫ Sonicos Version >= 6.2.5.0 <= 6.2.5.3
Sonicwall ≫ Sonicos Version >= 6.2.6.0 <= 6.2.6.1
Sonicwall ≫ Sonicos Version >= 6.2.7.0 <= 6.2.7.4
Sonicwall ≫ Sonicos Version >= 6.2.9.0 <= 6.2.9.2
Sonicwall ≫ Sonicos Version >= 6.5.0.0 <= 6.5.0.3
Sonicwall ≫ Sonicos Version >= 6.5.1.0 <= 6.5.1.4
Sonicwall ≫ Sonicos Version >= 6.5.2.0 <= 6.5.2.3
Sonicwall ≫ Sonicos Version >= 6.5.3.0 <= 6.5.3.3
Sonicwall ≫ Sonicos Version >= 6.5.4.0. <= 6.5.4.3
Sonicwall ≫ Sonicos Version 6.2.7.0
Sonicwall ≫ Sonicos Version 6.2.7.1
Sonicwall ≫ Sonicos Version 6.2.7.7
Siemens ≫ Siprotec 5 Firmware Version < 7.59
   Siemens ≫ Siprotec 5 Version -
Siemens ≫ Siprotec 5 Firmware Version < 7.91
   Siemens ≫ Siprotec 5 Version -
Siemens ≫ Power Meter 9410 Firmware Version < 2.2.1
   Siemens ≫ Power Meter 9410 Version -
Siemens ≫ Ruggedcom Win7000 Firmware Version < bs5.2.461.17
   Siemens ≫ Ruggedcom Win7000 Version -
Siemens ≫ Ruggedcom Win7018 Firmware Version < bs5.2.461.17
   Siemens ≫ Ruggedcom Win7018 Version -
Siemens ≫ Ruggedcom Win7025 Firmware Version < bs5.2.461.17
   Siemens ≫ Ruggedcom Win7025 Version -
Siemens ≫ Ruggedcom Win7200 Firmware Version < bs5.2.461.17
   Siemens ≫ Ruggedcom Win7200 Version -
Belden ≫ Hirschmann Hios Version <= 07.0.07
   Belden ≫ Hirschmann Ees20 Version -
   Belden ≫ Hirschmann Ees25 Version -
   Belden ≫ Hirschmann Eesx20 Version -
   Belden ≫ Hirschmann Eesx30 Version -
   Belden ≫ Hirschmann Grs1020 Version -
   Belden ≫ Hirschmann Grs1030 Version -
   Belden ≫ Hirschmann Grs1042 Version -
   Belden ≫ Hirschmann Grs1120 Version -
   Belden ≫ Hirschmann Grs1130 Version -
   Belden ≫ Hirschmann Grs1142 Version -
   Belden ≫ Hirschmann Msp30 Version -
   Belden ≫ Hirschmann Msp32 Version -
   Belden ≫ Hirschmann Rail Switch Power Lite Version -
   Belden ≫ Hirschmann Rail Switch Power Smart Version -
   Belden ≫ Hirschmann Red25 Version -
   Belden ≫ Hirschmann Rsp20 Version -
   Belden ≫ Hirschmann Rsp25 Version -
   Belden ≫ Hirschmann Rsp30 Version -
   Belden ≫ Hirschmann Rsp35 Version -
   Belden ≫ Hirschmann Rspe30 Version -
   Belden ≫ Hirschmann Rspe32 Version -
   Belden ≫ Hirschmann Rspe35 Version -
   Belden ≫ Hirschmann Rspe37 Version -
Belden ≫ Hirschmann Hios Version <= 07.5.01
   Belden ≫ Hirschmann Msp40 Version -
   Belden ≫ Hirschmann Octopus Os3 Version -
Belden ≫ Hirschmann Hios Version <= 07.2.04
   Belden ≫ Hirschmann Dragon Mach4000 Version -
   Belden ≫ Hirschmann Dragon Mach4500 Version -
Belden ≫ Hirschmann Hios Version <= 05.3.06
   Belden ≫ Hirschmann Eagle One Version -
   Belden ≫ Hirschmann Eagle20 Version -
   Belden ≫ Hirschmann Eagle30 Version -
Belden ≫ Garrettcom Magnum Dx940e Firmware Version <= 1.0.1_y7
   Belden ≫ Garrettcom Magnum Dx940e Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 26.63% 0.978
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

https://support2.windriver.com/index.php?page=security-notices
Vendor Advisory
Issue Tracking
https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf
Third Party Advisory
https://support.f5.com/csp/article/K41190253
Third Party Advisory
https://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/
Vendor Advisory
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009
Third Party Advisory
https://security.netapp.com/advisory/ntap-20190802-0001/
Third Party Advisory
https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12256
Vendor Advisory