Skip to content
OpenAdvisories
Critical ICSMA-19-274-01 11 CVEs

Interpeak IPnet TCP/IP Stack (Update D)

Published Oct 1, 2019 · Updated Jan 7, 2020 · Revision 5

Vendor: ENEA, Green Hills Software, ITRON, IP Infusion, and Wind River Product: Advanced Networking Technology (ANT) Product: INTEGRITY RTOS Product: Ipnet TCP/IP Stack Product: OSE Product: VxWorks Product: VxWorks bootrom network stack Product: VxWorks under CURRENT support (6.9.4.11, Vx7 SR540, Vx7 SR610)

Summary

Successful exploitation of these vulnerabilities could allow remote code execution.

Vulnerabilities 11

  • Unscored —
    CVE-2019-12255 Public exploit EPSS 75%

    Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: T…

  • Unscored —
    CVE-2019-12256 EPSS 27%

    Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET security vulnerability: S…

  • Unscored —
    CVE-2019-12257 EPSS 84%

    Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. There is an IPNET security vulne…

  • Unscored —
    CVE-2019-12258 Public exploit EPSS 23%

    Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. This is a IPNET security vulnerability: D…

  • Unscored —
    CVE-2019-12259 EPSS 16%

    Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. There is an IPNE…

  • Unscored —
    CVE-2019-12260 EPSS 23%

    Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4). This is an IPNET security vul…

  • Unscored —
    CVE-2019-12261

    Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4). This is an IPNET s…

  • Unscored —
    CVE-2019-12262

    Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component. IPNET security v…

  • Unscored —
    CVE-2019-12263

    Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4). There is an IPNET security …

  • Unscored —
    CVE-2019-12264

    Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc …

  • Unscored —
    CVE-2019-12265 EPSS 60%

    Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There is an IP…

Revision history

  1. #5

    ICSMA-19-274-01 Interpeak IPnet TCP/IP Stack (Update D)

  2. #4

    ICSMA-19-274-01 Interpeak IPnet TCP-IP Stack (Update C)

  3. #3

    ICSMA-19-274-01 Interpeak IPnet TCP-IP Stack (Update B)

  4. #2

    ICSMA-19-274-01 Interpeak IPnet TCP/IP Stack (Update A)

  5. #1

    ICSMA-19-274-01 Interpeak IPnet TCP/IP Stack

References