CVE-2019-12257:

CVE-2019-12257: Buffer/heap overflow vulnerability in Wind River VxWorks DHCP client (ipdhcpc) within the IPNET stack, affecting VxWorks 6.6 through 6.9.

Score
A numerical rating that indicates how dangerous this vulnerability is.

8.8High

Published Date:Aug 9, 2019
CISA KEV Date:*No Data*
Industries Affected:20

Threat Predictions

EPSS Score:15.4
EPSS Percentile:95%

Exploitability

Score:2.8
Attack Vector:ADJACENT_NETWORK
Attack Complexity:LOW
Privileges Required:NONE
User Interaction:NONE
Scope:UNCHANGED

Impact

Score:5.9
Confidentiality Impact:HIGH
Integrity Impact:HIGH
Availability Impact:HIGH

Description Preview

CVE-2019-12257: Buffer/heap overflow vulnerability in Wind River VxWorks DHCP client (ipdhcpc) within the IPNET stack, affecting VxWorks 6.6 through 6.9.

Overview

This CVE identifies a heap/buffer overflow in the DHCP client (ipdhcpc) of the IPNET networking stack used by Wind River VxWorks 6.6–6.9. The vulnerability arises from improper parsing of DHCP Offer/ACK messages, leading to potential memory corruption. Affected products are Wind River VxWorks 6.6 through 6.9, and multiple security advisories and vendor notes have been published with mitigations and patches.

Remediation

Apply the vendor fix: upgrade to a version or apply a patch that includes the IPNET DHCP stack vulnerability fix (as referenced in Wind River IPNET urgent11 and related advisories).
If upgrading is not immediately possible:
Disable DHCP client on devices where feasible and configure static IP addressing.
Restrict DHCP traffic: segment networks and implement access controls to limit DHCP messages to trusted networks only.
Place affected systems behind monitored borders with enhanced network security controls (firewalls, IDS/IPS) to detect abnormal DHCP traffic.
Monitor for signs of exploitation attempts or abnormal DHCP Offer/ACK activity and review relevant logs.
Validate patches in a test environment before rollout and verify that the DHCP parser code path has been updated.