7.5

CVE-2019-12258

Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. This is a IPNET security vulnerability: DoS of TCP connection via malformed TCP options.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Windriver ≫ Vxworks Version >= 6.5 < 6.9.4.12
Windriver ≫ Vxworks Version 7.0 Update -
Sonicwall ≫ Sonicos Version >= 5.9.0.0 <= 5.9.0.7
Sonicwall ≫ Sonicos Version >= 5.9.1.0. <= 5.9.1.12
Sonicwall ≫ Sonicos Version >= 6.2.0.0 <= 6.2.3.1
Sonicwall ≫ Sonicos Version >= 6.2.4.0 <= 6.2.4.3
Sonicwall ≫ Sonicos Version >= 6.2.5.0 <= 6.2.5.3
Sonicwall ≫ Sonicos Version >= 6.2.6.0 <= 6.2.6.1
Sonicwall ≫ Sonicos Version >= 6.2.7.0 <= 6.2.7.4
Sonicwall ≫ Sonicos Version >= 6.2.9.0 <= 6.2.9.2
Sonicwall ≫ Sonicos Version >= 6.5.0.0 <= 6.5.0.3
Sonicwall ≫ Sonicos Version >= 6.5.1.0 <= 6.5.1.4
Sonicwall ≫ Sonicos Version >= 6.5.2.0 <= 6.5.2.3
Sonicwall ≫ Sonicos Version >= 6.5.3.0 <= 6.5.3.3
Sonicwall ≫ Sonicos Version >= 6.5.4.0. <= 6.5.4.3
Sonicwall ≫ Sonicos Version 6.2.7.0
Sonicwall ≫ Sonicos Version 6.2.7.1
Sonicwall ≫ Sonicos Version 6.2.7.7
Siemens ≫ Siprotec 5 Firmware Version < 7.59
   Siemens ≫ Siprotec 5 Version -
Netapp ≫ E-series Santricity Os Controller Version >= 8.00 <= 8.40.50.00
Siemens ≫ Siprotec 5 Firmware Version < 7.91
   Siemens ≫ Siprotec 5 Version -
Siemens ≫ Power Meter 9410 Firmware Version < 2.2.1
   Siemens ≫ Power Meter 9410 Version -
Siemens ≫ Ruggedcom Win7000 Firmware Version < bs5.2.461.17
   Siemens ≫ Ruggedcom Win7000 Version -
Siemens ≫ Ruggedcom Win7018 Firmware Version < bs5.2.461.17
   Siemens ≫ Ruggedcom Win7018 Version -
Siemens ≫ Ruggedcom Win7025 Firmware Version < bs5.2.461.17
   Siemens ≫ Ruggedcom Win7025 Version -
Siemens ≫ Ruggedcom Win7200 Firmware Version < bs5.2.461.17
   Siemens ≫ Ruggedcom Win7200 Version -
Belden ≫ Hirschmann Hios Version <= 07.0.07
   Belden ≫ Hirschmann Ees20 Version -
   Belden ≫ Hirschmann Ees25 Version -
   Belden ≫ Hirschmann Eesx20 Version -
   Belden ≫ Hirschmann Eesx30 Version -
   Belden ≫ Hirschmann Grs1020 Version -
   Belden ≫ Hirschmann Grs1030 Version -
   Belden ≫ Hirschmann Grs1042 Version -
   Belden ≫ Hirschmann Grs1120 Version -
   Belden ≫ Hirschmann Grs1130 Version -
   Belden ≫ Hirschmann Grs1142 Version -
   Belden ≫ Hirschmann Msp30 Version -
   Belden ≫ Hirschmann Msp32 Version -
   Belden ≫ Hirschmann Rail Switch Power Lite Version -
   Belden ≫ Hirschmann Rail Switch Power Smart Version -
   Belden ≫ Hirschmann Red25 Version -
   Belden ≫ Hirschmann Rsp20 Version -
   Belden ≫ Hirschmann Rsp25 Version -
   Belden ≫ Hirschmann Rsp30 Version -
   Belden ≫ Hirschmann Rsp35 Version -
   Belden ≫ Hirschmann Rspe30 Version -
   Belden ≫ Hirschmann Rspe32 Version -
   Belden ≫ Hirschmann Rspe35 Version -
   Belden ≫ Hirschmann Rspe37 Version -
Belden ≫ Hirschmann Hios Version <= 07.5.01
   Belden ≫ Hirschmann Msp40 Version -
   Belden ≫ Hirschmann Octopus Os3 Version -
Belden ≫ Hirschmann Hios Version <= 07.2.04
   Belden ≫ Hirschmann Dragon Mach4000 Version -
   Belden ≫ Hirschmann Dragon Mach4500 Version -
Belden ≫ Hirschmann Hios Version <= 05.3.06
   Belden ≫ Hirschmann Eagle One Version -
   Belden ≫ Hirschmann Eagle20 Version -
   Belden ≫ Hirschmann Eagle30 Version -
Belden ≫ Garrettcom Magnum Dx940e Firmware Version <= 1.0.1_y7
   Belden ≫ Garrettcom Magnum Dx940e Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 23.35% 0.975
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-384 Session Fixation

Authenticating a user, or otherwise establishing a new user session, without invalidating any existing session identifier gives an attacker the opportunity to steal authenticated sessions.

https://support2.windriver.com/index.php?page=security-notices
Vendor Advisory
Issue Tracking
https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf
Third Party Advisory
https://support.f5.com/csp/article/K41190253
Third Party Advisory
https://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/
Vendor Advisory
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009
Third Party Advisory
https://security.netapp.com/advisory/ntap-20190802-0001/
Third Party Advisory
https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12258
Vendor Advisory