PT-2019-4737 · Wind River · Vxworks

Published 2019-08-09 · Updated 2022-08-12 · CVE-2019-12258

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Wind River VxWorks versions 6.6 through 7

Description The issue is related to errors in forming TCP options in the TCP component, which can lead to a denial of service (DoS) of TCP connections via malformed TCP options. This can be exploited by a remote attacker to cause a service disruption.

Recommendations For versions 6.6 through 7, consider disabling the TCP component or restricting its use until a patch is available to prevent exploitation of the session fixation vulnerability.

Exploit

Fix

Race Condition

Session Fixation

Weakness Enumeration

CWE-362

CWE-384

Related Identifiers

BDU:2020-01289

CVE-2019-12258

Affected Products

Vxworks

References · 16

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/vxworks/urgent11_check.rb · Exploit
• https://osv.dev/vulnerability/CVE-2019-12258 · Vendor Advisory
• https://windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-01289 · Security Note
• https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12258 · Vendor Advisory
• https://support2.windriver.com/index.php?page=security-notices · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-12258 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf · Note
• https://security.netapp.com/advisory/ntap-20190802-0001 · Note
• https://support.f5.com/csp/article/K41190253 · Note
• https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12258 · Note
• https://belden.com/hubfs/support/security/bulletins/Belden_Security_Bulletin_BSECV-2019-05_1v3.pdf?hsLang=en · Note
• https://t.me/cvenotify/26601 · Telegram Post
• https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf · Note
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009 · Note