CVE-2019-12258

Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. This is a IPNET security vulnerability: DoS of TCP connection via malformed TCP options.

Summary:

Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. This is a IPNET security vulnerability: DoS of TCP connection via malformed TCP options.

Reference Links(if available):

https://support2.windriver.com/index.php?page=security-notices

https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12258

https://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/

https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009

CVSS Score (if available)

v2: / MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

v3: / HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVE-2019-12258

Summary:

Reference Links(if available):

CVSS Score (if available)

Links to Exploits(if available)

[AKIRA] – Ransomware Victim: Find Great People1

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

CISA: Cisco Releases Security Bundle for Cisco ASA, FMC, and FTD Software

Summary:

Reference Links(if available):

CVSS Score (if available)

Links to Exploits(if available)

You may have missed

[AKIRA] – Ransomware Victim: Find Great People1

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

CISA: Cisco Releases Security Bundle for Cisco ASA, FMC, and FTD Software