An issue was discovered in Wind River VxWorks before 6.5. There is a possible heap overflow in dhcp client.

Description

Advisories 4

• SSA-910883 SSA-910883: DHCP Client Vulnerability in SINAMICS PERFECT HARMONY GH180 Drives Siemens ProductCERT · Jul 12, 2022
• ICSA-21-194-12 Siemens VxWorks-based Industrial Products (Update C) CISA ICS & IT advisories · May 12, 2022
• SSA-560465 SSA-560465: DHCP Client Vulnerability in VxWorks-based Industrial Products Siemens ProductCERT · May 10, 2022
• ICSA-22-102-02 Mitsubishi Electric MELSEC-Q Series C Controller Module CISA ICS & IT advisories · Apr 12, 2022

References

• https://support2.windriver.com/index.php?page=security-notices
• https://cert-portal.siemens.com/productcert/pdf/ssa-560465.pdf
• https://us-cert.cisa.gov/ics/advisories/icsa-21-194-12
• https://cert-portal.siemens.com/productcert/pdf/ssa-910883.pdf