CVE-2019-12263

—

CVSS 3.1

8.1 high

EPSS

3%p87

Published

Aug 9, 2019 (Aug 9, 2019)

Modified

Jun 17, 2026

Description

Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4). There is an IPNET security vulnerability: TCP Urgent Pointer state confusion due to race condition.

Vendors: windriver sonicwall siemens netapp belden
Products: vxworks, sonicos, siprotec 5 firmware, e-series santricity os controller, power meter 9410 firmware, power meter 9810 firmware, ruggedcom win7000 firmware, ruggedcom win7018 firmware, ruggedcom win7025 firmware, ruggedcom win7200 firmware, hirschmann hios, garrettcom magnum dx940e firmware
Weakness: CWE-362, CWE-787
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.2%)

In the news2 stories

Critical zero-days discovered in VxWorks RTOS, billions of devices at risk

Security AffairsJul 30, 07:25 UTC · Jul 30, 2019Exploit / PoC CVE-2019-12256 CVE-2019-12255 CVE-2019-12260+8 CVEs

Critical Flaws Found in VxWorks RTOS That Powers Over 2 Billion Devices

The Hacker NewsJul 29, 16:19 UTC · Jul 29, 2019Exploit / PoC CVE-2019-12256 CVE-2019-12255 CVE-2019-12260+8 CVEs