PT-2019-4732 · Wind River · Vxworks

Published 2019-08-09 · Updated 2022-08-12 · CVE-2019-12261

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Wind River VxWorks versions 6.7 through 6.9 Wind River VxWorks version vx7

Description The issue is related to errors in the TCP Urgent Pointer state during the "connect()" operation to a remote host. Exploitation of this issue may allow a remote attacker to execute arbitrary code by sending specially crafted TCP packets. This is an IPNET security vulnerability related to TCP Urgent Pointer state confusion during connection to a remote host.

Recommendations For Wind River VxWorks versions 6.7 through 6.9, consider disabling the TCP component until a patch is available. For Wind River VxWorks version vx7, consider restricting access to the TCP component to minimize the risk of exploitation. As a temporary workaround, avoid using the connect() function to remote hosts until the issue is resolved.

Fix

Integer Underflow

Buffer Overflow

Weakness Enumeration

CWE-191

CWE-120

Related Identifiers

BDU:2020-01283

CVE-2019-12261

Affected Products

Vxworks

References · 16

• https://nvd.nist.gov/vuln/detail/CVE-2019-12261 · Security Note
• https://windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-01283 · Security Note
• https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12261 · Vendor Advisory
• https://support2.windriver.com/index.php?page=security-notices · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-12261 · Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf · Note
• https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12261 · Note
• https://security.netapp.com/advisory/ntap-20190802-0001 · Note
• https://support.f5.com/csp/article/K41190253 · Note
• https://belden.com/hubfs/support/security/bulletins/Belden_Security_Bulletin_BSECV-2019-05_1v3.pdf?hsLang=en · Note
• https://t.me/cvenotify/26604 · Telegram Post
• https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf · Note
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009 · Note
• https://oracle.com/security-alerts/cpuoct2020.html · Note