5.3

CVE-2019-12265

Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There is an IPNET security vulnerability: IGMP Information leak via IGMPv3 specific membership report.

Data is provided by the National Vulnerability Database (NVD)
Windriver ≫ Vxworks Version >= 6.5 < 6.9.4.12
Windriver ≫ Vxworks Version7.0 Update-
Sonicwall ≫ Sonicos Version >= 5.9.0.0 <= 5.9.0.7
Sonicwall ≫ Sonicos Version >= 5.9.1.0. <= 5.9.1.12
Sonicwall ≫ Sonicos Version >= 6.2.0.0 <= 6.2.3.1
Sonicwall ≫ Sonicos Version >= 6.2.4.0 <= 6.2.4.3
Sonicwall ≫ Sonicos Version >= 6.2.5.0 <= 6.2.5.3
Sonicwall ≫ Sonicos Version >= 6.2.6.0 <= 6.2.6.1
Sonicwall ≫ Sonicos Version >= 6.2.7.0 <= 6.2.7.4
Sonicwall ≫ Sonicos Version >= 6.2.9.0 <= 6.2.9.2
Sonicwall ≫ Sonicos Version >= 6.5.0.0 <= 6.5.0.3
Sonicwall ≫ Sonicos Version >= 6.5.1.0 <= 6.5.1.4
Sonicwall ≫ Sonicos Version >= 6.5.2.0 <= 6.5.2.3
Sonicwall ≫ Sonicos Version >= 6.5.3.0 <= 6.5.3.3
Sonicwall ≫ Sonicos Version >= 6.5.4.0. <= 6.5.4.3
Sonicwall ≫ Sonicos Version6.2.7.0
Sonicwall ≫ Sonicos Version6.2.7.1
Sonicwall ≫ Sonicos Version6.2.7.7
Siemens ≫ Siprotec 5 Firmware Version < 7.91
   Siemens ≫ Siprotec 5 Version-
Siemens ≫ Siprotec 5 Firmware Version < 7.59
   Siemens ≫ Siprotec 5 Version-
Siemens ≫ Siprotec 5 Firmware Version < 7.91
   Siemens ≫ Siprotec 5 Version-
Netapp ≫ E-series Santricity Os Controller Version >= 8.00 <= 8.40.50.00
Siemens ≫ Power Meter 9410 Firmware Version < 2.2.1
   Siemens ≫ Power Meter 9410 Version-
Siemens ≫ Ruggedcom Win7000 Firmware Version < bs5.2.461.17
   Siemens ≫ Ruggedcom Win7000 Version-
Siemens ≫ Ruggedcom Win7018 Firmware Version < bs5.2.461.17
   Siemens ≫ Ruggedcom Win7018 Version-
Siemens ≫ Ruggedcom Win7025 Firmware Version < bs5.2.461.17
   Siemens ≫ Ruggedcom Win7025 Version-
Siemens ≫ Ruggedcom Win7200 Firmware Version < bs5.2.461.17
   Siemens ≫ Ruggedcom Win7200 Version-
Belden ≫ Hirschmann Hios Version <= 07.0.07
   Belden ≫ Hirschmann Ees20 Version-
   Belden ≫ Hirschmann Ees25 Version-
   Belden ≫ Hirschmann Eesx20 Version-
   Belden ≫ Hirschmann Eesx30 Version-
   Belden ≫ Hirschmann Grs1020 Version-
   Belden ≫ Hirschmann Grs1030 Version-
   Belden ≫ Hirschmann Grs1042 Version-
   Belden ≫ Hirschmann Grs1120 Version-
   Belden ≫ Hirschmann Grs1130 Version-
   Belden ≫ Hirschmann Grs1142 Version-
   Belden ≫ Hirschmann Msp30 Version-
   Belden ≫ Hirschmann Msp32 Version-
   Belden ≫ Hirschmann Rail Switch Power Lite Version-
   Belden ≫ Hirschmann Rail Switch Power Smart Version-
   Belden ≫ Hirschmann Red25 Version-
   Belden ≫ Hirschmann Rsp20 Version-
   Belden ≫ Hirschmann Rsp25 Version-
   Belden ≫ Hirschmann Rsp30 Version-
   Belden ≫ Hirschmann Rsp35 Version-
   Belden ≫ Hirschmann Rspe30 Version-
   Belden ≫ Hirschmann Rspe32 Version-
   Belden ≫ Hirschmann Rspe35 Version-
   Belden ≫ Hirschmann Rspe37 Version-
Belden ≫ Hirschmann Hios Version <= 07.5.01
   Belden ≫ Hirschmann Msp40 Version-
   Belden ≫ Hirschmann Octopus Os3 Version-
Belden ≫ Hirschmann Hios Version <= 07.2.04
Belden ≫ Hirschmann Hios Version <= 05.3.06
   Belden ≫ Hirschmann Eagle One Version-
   Belden ≫ Hirschmann Eagle20 Version-
   Belden ≫ Hirschmann Eagle30 Version-
Belden ≫ Garrettcom Magnum Dx940e Firmware Version <= 1.0.1_y7
   Belden ≫ Garrettcom Magnum Dx940e Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 4.59% 0.888
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.