CVE-2019-12263

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4). There is an IPNET security vulnerability: TCP Urgent Pointer state confusion due to race condition.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-362 CWE-787

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdfThird Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdfThird Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdfThird Party Advisory
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009Third Party Advisory
https://security.netapp.com/advisory/ntap-20190802-0001/Third Party Advisory
https://support.f5.com/csp/article/K41190253Third Party Advisory
https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12263Vendor Advisory
https://support2.windriver.com/index.php?page=security-noticesIssue Tracking, Vendor Advisory
https://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdfThird Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdfThird Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdfThird Party Advisory
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009Third Party Advisory
https://security.netapp.com/advisory/ntap-20190802-0001/Third Party Advisory
https://support.f5.com/csp/article/K41190253Third Party Advisory
https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12263Vendor Advisory
https://support2.windriver.com/index.php?page=security-noticesIssue Tracking, Vendor Advisory
https://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/Vendor Advisory

Timeline

Published: Aug 9, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-122647.1Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component CVE-2019-122655.3Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There is an IPNET security vulnerab CVE-2019-122669.8Stack-based Buffer Overflow vulnerability in Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to run arbitrary code on the affected device CVE-2019-122697.5Enigmail before 2.0.11 allows PGP signature spoofing: for an inline PGP message, an attacker can cause the product to display a "correctly s CVE-2019-12275.5An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully ex CVE-2019-122707.4OpenText Brava! Enterprise and Brava! Server 7.5 through 16.4 configure excessive permissions by default on Windows. During installation, a CVE-2019-122719.8Sandline Centraleyezer (On Premises) allows unrestricted File Upload with a dangerous type, because the feature of adding ".jpg" to any uplo CVE-2019-122729.8In OpenWrt LuCI through 0.10, the endpoints admin/status/realtime/bandwidth_status and admin/status/realtime/wireless_status of the web appl CVE-2019-122736.5OutSystems Platform 10 through 11 allows ImageResourceDetail.aspx CSRF for content modifications and file uploads. NOTE: The product is self CVE-2019-122748.8In Rancher 1 and 2 through 2.2.3, unprivileged users (if allowed to deploy nodes) can gain admin access to the Rancher management plane beca CVE-2019-122767.5A Path Traversal vulnerability in Controllers/LetsEncryptController.cs in LetsEncryptController in GrandNode 4.40 allows remote, unauthentic CVE-2019-122779.8Blogifier 2.3 before 2019-05-11 does not properly restrict APIs, as demonstrated by missing checks for .. in a pathname.