Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. There is an IPNET security vulnerability: DoS via NULL dereference in IGMP parsing.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf | Third Party Advisory |
| https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf | Third Party Advisory |
| https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf | Third Party Advisory |
| https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009 | Third Party Advisory |
| https://security.netapp.com/advisory/ntap-20190802-0001/ | Third Party Advisory |
| https://support.f5.com/csp/article/K41190253 | Third Party Advisory |
| https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12259 | Vendor Advisory |
| https://support2.windriver.com/index.php?page=security-notices | Issue Tracking Vendor Advisory |
| https://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
Configuration 5 (hide)
| AND |
|
Configuration 6 (hide)
| AND |
|
Configuration 7 (hide)
| AND |
|
Configuration 8 (hide)
| AND |
|
Configuration 9 (hide)
| AND |
|
Configuration 10 (hide)
| AND |
|
Configuration 11 (hide)
| AND |
|
Configuration 12 (hide)
| AND |
|
Configuration 13 (hide)
| AND |
|
Configuration 14 (hide)
| AND |
|
Configuration 15 (hide)
| AND |
|
Configuration 16 (hide)
| AND |
|
Configuration 17 (hide)
| AND |
|
History
16 Jun 2022, 18:10
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:h:belden:hirschmann_grs1120:-:*:*:*:*:*:*:* cpe:2.3:h:belden:hirschmann_eagle_one:-:*:*:*:*:*:*:* cpe:2.3:h:belden:hirschmann_eagle20:-:*:*:*:*:*:*:* cpe:2.3:h:belden:garrettcom_magnum_dx940e:-:*:*:*:*:*:*:* cpe:2.3:h:belden:hirschmann_grs1030:-:*:*:*:*:*:*:* cpe:2.3:h:belden:hirschmann_ees20:-:*:*:*:*:*:*:* cpe:2.3:h:belden:hirschmann_rspe32:-:*:*:*:*:*:*:* cpe:2.3:h:belden:hirschmann_msp40:-:*:*:*:*:*:*:* cpe:2.3:h:belden:hirschmann_rsp35:-:*:*:*:*:*:*:* cpe:2.3:h:belden:hirschmann_grs1130:-:*:*:*:*:*:*:* cpe:2.3:h:belden:hirschmann_octopus_os3:-:*:*:*:*:*:*:* cpe:2.3:o:belden:garrettcom_magnum_dx940e_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:belden:hirschmann_eesx20:-:*:*:*:*:*:*:* cpe:2.3:h:belden:hirschmann_rspe37:-:*:*:*:*:*:*:* cpe:2.3:h:belden:hirschmann_eesx30:-:*:*:*:*:*:*:* cpe:2.3:o:belden:hirschmann_hios:*:*:*:*:*:*:*:* cpe:2.3:h:belden:hirschmann_rsp30:-:*:*:*:*:*:*:* cpe:2.3:h:belden:hirschmann_msp32:-:*:*:*:*:*:*:* cpe:2.3:h:belden:hirschmann_grs1020:-:*:*:*:*:*:*:* cpe:2.3:h:belden:hirschmann_ees25:-:*:*:*:*:*:*:* cpe:2.3:h:belden:hirschmann_rsp25:-:*:*:*:*:*:*:* cpe:2.3:h:belden:hirschmann_red25:-:*:*:*:*:*:*:* cpe:2.3:h:belden:hirschmann_grs1142:-:*:*:*:*:*:*:* cpe:2.3:h:belden:hirschmann_rail_switch_power_smart:-:*:*:*:*:*:*:* cpe:2.3:h:belden:hirschmann_msp30:-:*:*:*:*:*:*:* cpe:2.3:h:belden:hirschmann_dragon_mach4500:-:*:*:*:*:*:*:* cpe:2.3:h:belden:hirschmann_rsp20:-:*:*:*:*:*:*:* cpe:2.3:h:belden:hirschmann_rail_switch_power_lite:-:*:*:*:*:*:*:* cpe:2.3:h:belden:hirschmann_rspe30:-:*:*:*:*:*:*:* cpe:2.3:h:belden:hirschmann_grs1042:-:*:*:*:*:*:*:* cpe:2.3:h:belden:hirschmann_rspe35:-:*:*:*:*:*:*:* cpe:2.3:h:belden:hirschmann_eagle30:-:*:*:*:*:*:*:* cpe:2.3:h:belden:hirschmann_dragon_mach4000:-:*:*:*:*:*:*:* |
|
| First Time |
Belden hirschmann Rspe30
Belden hirschmann Octopus Os3 Belden hirschmann Rspe32 Belden hirschmann Dragon Mach4500 Belden hirschmann Grs1030 Belden hirschmann Msp32 Belden hirschmann Rsp35 Belden hirschmann Grs1020 Belden hirschmann Grs1042 Belden hirschmann Rspe37 Belden hirschmann Rsp25 Belden hirschmann Rail Switch Power Lite Belden hirschmann Msp40 Belden hirschmann Ees20 Belden hirschmann Rspe35 Belden garrettcom Magnum Dx940e Firmware Belden hirschmann Eagle20 Belden Belden garrettcom Magnum Dx940e Belden hirschmann Ees25 Belden hirschmann Rsp20 Belden hirschmann Grs1130 Belden hirschmann Grs1120 Belden hirschmann Grs1142 Belden hirschmann Eagle30 Belden hirschmann Msp30 Belden hirschmann Eagle One Belden hirschmann Eesx30 Belden hirschmann Rsp30 Belden hirschmann Eesx20 Belden hirschmann Rail Switch Power Smart Belden hirschmann Red25 Belden hirschmann Hios Belden hirschmann Dragon Mach4000 |
10 Feb 2022, 20:01
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:windriver:vxworks:6.8:*:*:*:*:*:*:* cpe:2.3:o:windriver:vxworks:7.0:*:*:*:*:*:*:* cpe:2.3:o:windriver:vxworks:6.7:*:*:*:*:*:*:* cpe:2.3:o:windriver:vxworks:6.6:*:*:*:*:*:*:* cpe:2.3:o:netap:e-series_santricity_os_controller:*:*:*:*:*:*:*:* |
cpe:2.3:o:windriver:vxworks:7.0:-:*:*:*:*:*:* cpe:2.3:o:windriver:vxworks:*:*:*:*:*:*:*:* |
07 Sep 2021, 14:41
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:windriver:vxworks:7.0:*:*:*:*:*:*:* |
Information
Published : 2019-08-09 19:15
Updated : 2023-12-10 12:59
NVD link : CVE-2019-12259
Mitre link : CVE-2019-12259
CVE.ORG link : CVE-2019-12259
JSON object : View
Products Affected
belden
- hirschmann_msp30
- hirschmann_grs1042
- hirschmann_rail_switch_power_smart
- hirschmann_msp40
- hirschmann_grs1120
- hirschmann_rsp25
- hirschmann_rsp20
- hirschmann_ees25
- hirschmann_rspe37
- hirschmann_eagle30
- hirschmann_octopus_os3
- hirschmann_grs1020
- hirschmann_grs1130
- hirschmann_rspe30
- hirschmann_eesx30
- hirschmann_msp32
- hirschmann_rspe35
- hirschmann_eagle20
- hirschmann_rsp30
- hirschmann_rail_switch_power_lite
- hirschmann_eagle_one
- hirschmann_grs1142
- garrettcom_magnum_dx940e
- hirschmann_rsp35
- hirschmann_dragon_mach4000
- hirschmann_hios
- hirschmann_ees20
- hirschmann_dragon_mach4500
- hirschmann_grs1030
- hirschmann_red25
- hirschmann_rspe32
- hirschmann_eesx20
- garrettcom_magnum_dx940e_firmware
siemens
- ruggedcom_win7025
- 9810_power_meter_firmware
- siprotec_5
- siprotec_5_firmware
- ruggedcom_win7018_firmware
- 9410_power_meter_firmware
- ruggedcom_win7018
- 9410_power_meter
- ruggedcom_win7200
- 9810_power_meter
- ruggedcom_win7200_firmware
- ruggedcom_win7025_firmware
- ruggedcom_win7000
- ruggedcom_win7000_firmware
sonicwall
- sonicos
windriver
- vxworks
CWE
CWE-476
NULL Pointer Dereference