CVE-2019-12255:
Buffer overflow in Wind River VxWorks IPNET TCP/IP stack due to TCP Urgent Pointer being zero, causing an integer underflow (CVE-2019-12255).
Score
A numerical rating that indicates how dangerous this vulnerability is.
9.8Critical- Published Date:Aug 9, 2019
- CISA KEV Date:*No Data*
- Industries Affected:20
Threat Predictions
- EPSS Score:76.9
- EPSS Percentile:99%
Exploitability
- Score:3.9
- Attack Vector:NETWORK
- Attack Complexity:LOW
- Privileges Required:NONE
- User Interaction:NONE
- Scope:UNCHANGED
Impact
- Score:5.9
- Confidentiality Impact:HIGH
- Integrity Impact:HIGH
- Availability Impact:HIGH
Description Preview
Buffer overflow in Wind River VxWorks IPNET TCP/IP stack due to TCP Urgent Pointer being zero, causing an integer underflow (CVE-2019-12255).
Overview
This CVE details a vulnerability in the Wind River VxWorks IPNET TCP/IP stack where the TCP Urgent Pointer field being zero triggers a buffer overflow via integer underflow. The record notes this as issue 1 of 4 and does not specify affected product versions or vendors beyond Wind River, indicating that the impact may vary by deployment. Public advisories from Wind River and other involved vendors reference the vulnerability, underscoring the need for timely patching and exposure controls for systems running VxWorks IPNET.
Remediation
- Identify affected systems running Wind River VxWorks IPNET TCP/IP stack and confirm the presence of the vulnerability (CVE-2019-12255).
- Apply the latest official patch or upgrade to a version of VxWorks IPNET that includes the fix for CVE-2019-12255, per Wind River advisories.
- If a patch is not available for your platform, implement compensating controls:
- Restrict TCP/IP exposure by deploying network segmentation and restricting access to vulnerable devices with firewalls or ACLs.
- Place affected devices behind intrusion detection/prevention systems and monitor for exploit attempts related to this vector.
- Limit unnecessary TCP/IP services and external reachability where feasible.
- Validate the fix in a test environment before production deployment and document the patch level.
- Continuously monitor for new advisories or additional IPNET issues and apply updates as they are released.
References
- - Wind River Security Notices: https://support2.windriver.com/index.php?page=security-notices
- - SonicWall PSIRT vulnerability detail SNWLID-2019-0009: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009
- - Siemens SSA-632562.pdf: https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf
- - NetApp advisory NTAP-20190802-0001: https://security.netapp.com/advisory/ntap-20190802-0001/
- - Wind River IPNET urgent11 security announcement: https://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/
- - Wind River CVE view for CVE-2019-12255: https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12255
- - PacketStorm: VxWorks-6.8-Integer-Underflow.html: http://packetstormsecurity.com/files/154022/VxWorks-6.8-Integer-Underflow.html
- - F5 support article K41190253: https://support.f5.com/csp/article/K41190253
- - Siemens SSA-189842.pdf: https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf
- - Siemens SSA-352504.pdf: https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf
Industries Affected
Below is a list of industries most commonly impacted or potentially at risk based on intelligence.
