Lucene search

[email protected]CVE-2015-3963

HistoryAug 04, 2015 - 1:59 a.m.

CVE-2015-3963

2015-08-0401:59:07

CWE-330

[email protected]

web.nvd.nist.gov

cve-2015-3963

vxworks

ipnet coreip

tcp isn

security vulnerability

schneider electric sage rtu

nvd

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

5.1 Medium

AI Score

Confidence

High

0.024 Low

EPSS

Percentile

89.9%

JSON

Wind River VxWorks before 5.5.1, 6.5.x through 6.7.x before 6.7.1.1, 6.8.x before 6.8.3, 6.9.x before 6.9.4.4, and 7.x before 7 ipnet_coreip 1.2.2.0, as used on Schneider Electric SAGE RTU devices before J2 and other devices, does not properly generate TCP initial sequence number (ISN) values, which makes it easier for remote attackers to spoof TCP sessions by predicting an ISN value.

Affected configurations

NVD

Node

windrivervxworksRange6.5–6.6

windrivervxworksRange6.7–6.7.1.1

windrivervxworksRange6.8–6.8.3

windrivervxworksRange6.9–6.9.4.4

windrivervxworksMatch6.6.3cert

windrivervxworksMatch6.6.4cert

windrivervxworksMatch6.6.4.1cert

windrivervxworksMatch7.0

AND

schneider-electricsage_1210Match-

schneider-electricsage_1230Match-

schneider-electricsage_1250Match-

schneider-electricsage_1310Match-

schneider-electricsage_1330Match-

schneider-electricsage_1350Match-

schneider-electricsage_1410Match-

schneider-electricsage_1430Match-

schneider-electricsage_1450Match-

schneider-electricsage_2200Match-

schneider-electricsage_2400Match-

schneider-electricsage_3030Match-

schneider-electricsage_3030_magnumMatch-

CPENameOperatorVersion
windriver:vxworkswindriver vxworksle6.6
windriver:vxworkswindriver vxworkslt6.7.1.1
windriver:vxworkswindriver vxworkslt6.8.3
windriver:vxworkswindriver vxworkslt6.9.4.4
windriver:vxworkswindriver vxworkseq6.6.3
windriver:vxworkswindriver vxworkseq6.6.4
windriver:vxworkswindriver vxworkseq6.6.4.1
windriver:vxworkswindriver vxworkseq7.0

CPE	Name	Operator	Version
windriver:vxworks	windriver vxworks	le	6.6
windriver:vxworks	windriver vxworks	lt	6.7.1.1
windriver:vxworks	windriver vxworks	lt	6.8.3
windriver:vxworks	windriver vxworks	lt	6.9.4.4
windriver:vxworks	windriver vxworks	eq	6.6.3
windriver:vxworks	windriver vxworks	eq	6.6.4
windriver:vxworks	windriver vxworks	eq	6.6.4.1
windriver:vxworks	windriver vxworks	eq	7.0