The Week in Vulnerabilities: Toptech, Lantronix, Langflow, and CISA Malcolm Flaws
Cyble sensors logged exploitation attempts against about 20 flaws as CISA issued 14 ICS advisories.
68
Vulnerability2 · 1 read
CVE-2019-12260
- CVSS 3.1
- 9.8 critical
- EPSS
- 23%p98
- Published
- ·
- Modified
Description · NVD
Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4). This is an IPNET security vulnerability: TCP Urgent Pointer state confusion caused by a malformed TCP AO option.
- Products
- vxworks, sonicos, siprotec 5 firmware, e-series santricity os controller, power meter 9410 firmware, power meter 9810 firmware, ruggedcom win7000 firmware, ruggedcom win7018 firmware, ruggedcom win7025 firmware, ruggedcom win7200 firmware, communications eagle, hirschmann hios
- Weakness
- CWE-120
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H