NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2019-12264

CVSS 3.1: 7.1 high
EPSS: 8%p95
Published: Aug 5, 2019 · Aug 5, 2019
Modified: Jun 17, 2026

Analyze CVE-2019-12264 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component.

Vendors: windriver belden siemens

Products: vxworks, hirschmann hios, garrettcom magnum dx940e firmware, ruggedcom win7000 firmware, ruggedcom win7018 firmware, ruggedcom win7025 firmware, ruggedcom win7200 firmware

Weakness: CWE-88

Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

NVD CVE.org GitHub PoCs EPSS (8.3%)

In the news

5 stories

Know Your Infusion Pump Vulnerabilities and Secure Your Healthcare Organization

Palo Alto Unit 42Jun 5, 23:27 UTC · Jun 5, 2024VulnerabilityCVE-2019-12255 CVE-2019-12264 CVE-2016-9355+73 · 1 read

60

75% Of Medical Infusion Pumps Affected By Known Vulnerabilities

Security AffairsMar 3, 19:48 UTC · Mar 3, 2022VulnerabilityCVE-2019-12255 CVE-2019-12264 CVE-2016-9355+71

60

Critical zero-days discovered in VxWorks RTOS, billions of devices at risk

Security AffairsJul 30, 07:25 UTC · Jul 30, 2019Exploit / PoCCVE-2019-12256 CVE-2019-12255 CVE-2019-12260+81

60

Critical Flaws Found in VxWorks RTOS That Powers Over 2 Billion Devices

The Hacker NewsJul 29, 16:19 UTC · Jul 29, 2019Exploit / PoCCVE-2019-12256 CVE-2019-12255 CVE-2019-12260+82 · 1 read

60

Report: Nearly 75% of Infusion Pumps Affected by Severe Vulnerabilities

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2022VulnerabilityCVE-2019-12255 CVE-2019-12264 CVE-2016-9355+71

35