NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2019-12262

CVSS 3.1: 9.8 critical
EPSS: 4%p90
Published: Aug 14, 2019 · Aug 14, 2019
Modified: Jun 17, 2026

Analyze CVE-2019-12262 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component. IPNET security vulnerability: Handling of unsolicited Reverse ARP replies (Logical Flaw).

Vendors: windriver belden siemens

Products: vxworks, hirschmann hios, garrettcom magnum dx940e firmware, ruggedcom win7000 firmware, ruggedcom win7018 firmware, ruggedcom win7025 firmware, ruggedcom win7200 firmware

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.1%)

In the news

4 stories

200 million enterprise, industrial, and medical devices affected by RCE flaws in VxWorks RTOS

Help Net SecurityNov 14, 13:02 UTC · Nov 14, 2023VulnerabilityExploitedCVE-2019-12255 CVE-2019-122625

60

Critical zero-days discovered in VxWorks RTOS, billions of devices at risk

Security AffairsJul 30, 07:25 UTC · Jul 30, 2019Exploit / PoCCVE-2019-12256 CVE-2019-12255 CVE-2019-12260+81

60

Critical Flaws Found in VxWorks RTOS That Powers Over 2 Billion Devices

The Hacker NewsJul 29, 16:19 UTC · Jul 29, 2019Exploit / PoCCVE-2019-12256 CVE-2019-12255 CVE-2019-12260+82 · 1 read

60

Urgent11 flaws affect more medical, industrial devices than previously thought

Help Net SecurityFeb 11, 12:31 UTC · Feb 11, 2021VulnerabilityCVE-2019-12255 CVE-2019-122622 · 1 read

47