Lucene search

[email protected]CVE-2019-12264

HistoryAug 05, 2019 - 6:15 p.m.

CVE-2019-12264

2019-08-0518:15:10

CWE-88

[email protected]

web.nvd.nist.gov

wind river

vxworks

incorrect access control

ipv4

ipdhcpc

dhcp client

cve-2019-12264

nvd

4.8 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:N/I:P/A:P

7.1 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

8.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.5%

JSON

Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component.

Affected configurations

NVD

Node

windrivervxworksMatch6.6

windrivervxworksMatch6.7

windrivervxworksMatch6.8

windrivervxworksMatch6.9.3

windrivervxworksMatch6.9.4

windrivervxworksMatch7.0

Node

beldenhirschmann_hiosRange≤07.0.07

AND

beldenhirschmann_ees20Match-

beldenhirschmann_ees25Match-

beldenhirschmann_eesx20Match-

beldenhirschmann_eesx30Match-

beldenhirschmann_grs1020Match-

beldenhirschmann_grs1030Match-

beldenhirschmann_grs1042Match-

beldenhirschmann_grs1120Match-

beldenhirschmann_grs1130Match-

beldenhirschmann_grs1142Match-

beldenhirschmann_msp30Match-

beldenhirschmann_msp32Match-

beldenhirschmann_rail_switch_power_liteMatch-

beldenhirschmann_rail_switch_power_smartMatch-

beldenhirschmann_red25Match-

beldenhirschmann_rsp20Match-

beldenhirschmann_rsp25Match-

beldenhirschmann_rsp30Match-

beldenhirschmann_rsp35Match-

beldenhirschmann_rspe30Match-

beldenhirschmann_rspe32Match-

beldenhirschmann_rspe35Match-

beldenhirschmann_rspe37Match-

Node

beldenhirschmann_hiosRange≤07.5.01

AND

beldenhirschmann_msp40Match-

beldenhirschmann_octopus_os3Match-

Node

beldenhirschmann_hiosRange≤07.2.04

AND

beldenhirschmann_dragon_mach4000Match-

beldenhirschmann_dragon_mach4500Match-

Node

beldenhirschmann_hiosRange≤05.3.06

AND

beldenhirschmann_eagle_oneMatch-

beldenhirschmann_eagle20Match-

beldenhirschmann_eagle30Match-

Node

beldengarrettcom_magnum_dx940e_firmwareRange≤1.0.1_y7

AND

beldengarrettcom_magnum_dx940eMatch-

Node

siemensruggedcom_win7000_firmwareRange<bs5.2.461.17

AND

siemensruggedcom_win7000Match-

Node

siemensruggedcom_win7018_firmwareRange<bs5.2.461.17

AND

siemensruggedcom_win7018Match-

Node

siemensruggedcom_win7025_firmwareRange<bs5.2.461.17

AND

siemensruggedcom_win7025Match-

Node

siemensruggedcom_win7200_firmwareRange<bs5.2.461.17

AND

siemensruggedcom_win7200Match-

CPENameOperatorVersion
windriver:vxworkswindriver vxworkseq6.6
windriver:vxworkswindriver vxworkseq6.7
windriver:vxworkswindriver vxworkseq6.8
windriver:vxworkswindriver vxworkseq6.9.3
windriver:vxworkswindriver vxworkseq6.9.4
windriver:vxworkswindriver vxworkseq7.0

CPE	Name	Operator	Version
windriver:vxworks	windriver vxworks	eq	6.6
windriver:vxworks	windriver vxworks	eq	6.7
windriver:vxworks	windriver vxworks	eq	6.8
windriver:vxworks	windriver vxworks	eq	6.9.3
windriver:vxworks	windriver vxworks	eq	6.9.4
windriver:vxworks	windriver vxworks	eq	7.0