CVE-2019-12264

—1

CVSS 3.1

7.1 high

EPSS

8%p95

Published

Aug 5, 2019 (Aug 5, 2019)

Modified

Jun 17, 2026

Description

Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component.

Vendors: windriver belden siemens
Products: vxworks, hirschmann hios, garrettcom magnum dx940e firmware, ruggedcom win7000 firmware, ruggedcom win7018 firmware, ruggedcom win7025 firmware, ruggedcom win7200 firmware
Weakness: CWE-88
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

NVD CVE.org GitHub PoCs EPSS (8.3%)

In the news5 stories

Know Your Infusion Pump Vulnerabilities and Secure Your Healthcare Organization

Palo Alto Unit 42Jun 5, 23:27 UTC · Jun 5, 2024Vulnerability CVE-2019-12255 CVE-2019-12264 CVE-2016-9355+7 CVEs1

60

75% Of Medical Infusion Pumps Affected By Known Vulnerabilities

Security AffairsMar 3, 19:48 UTC · Mar 3, 2022Vulnerability CVE-2019-12255 CVE-2019-12264 CVE-2016-9355+7 CVEs

60

Critical zero-days discovered in VxWorks RTOS, billions of devices at risk

Security AffairsJul 30, 07:25 UTC · Jul 30, 2019Exploit / PoC CVE-2019-12256 CVE-2019-12255 CVE-2019-12260+8 CVEs

60

Critical Flaws Found in VxWorks RTOS That Powers Over 2 Billion Devices

The Hacker NewsJul 29, 16:19 UTC · Jul 29, 2019Exploit / PoC CVE-2019-12256 CVE-2019-12255 CVE-2019-12260+8 CVEs

60

Report: Nearly 75% of Infusion Pumps Affected by Severe Vulnerabilities

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2022Vulnerability CVE-2019-12255 CVE-2019-12264 CVE-2016-9355+7 CVEs

35