CVE-2019-12262:
Wind River VxWorks RARP client component has an incorrect access control flaw in IPNET, handling unsolicited Reverse ARP replies (CVE-2019-12262).
Score
A numerical rating that indicates how dangerous this vulnerability is.
9.8Critical- Published Date:Aug 14, 2019
- CISA KEV Date:*No Data*
- Industries Affected:20
Threat Predictions
- EPSS Score:0.2
- EPSS Percentile:37%
Exploitability
- Score:3.9
- Attack Vector:NETWORK
- Attack Complexity:LOW
- Privileges Required:NONE
- User Interaction:NONE
- Scope:UNCHANGED
Impact
- Score:5.9
- Confidentiality Impact:HIGH
- Integrity Impact:HIGH
- Availability Impact:HIGH
Description Preview
Wind River VxWorks RARP client component has an incorrect access control flaw in IPNET, handling unsolicited Reverse ARP replies (CVE-2019-12262).
Overview
This CVE covers an IPNET security vulnerability in Wind River VxWorks where the RARP client does not enforce proper access control for unsolicited Reverse ARP replies. Affected releases (VxWorks 6.6 through 7) may be exposed to ARP-related manipulation by a nearby attacker, depending on network exposure and device configuration. The risk centers on unauthorized ARP processing that could impact network traffic integrity on vulnerable systems.
Remediation
- 1) Apply vendor-provided patch or upgrade Wind River VxWorks to a version that fixes CVE-2019-12262. Contact Wind River support to obtain the appropriate security update and install it in affected systems.
- 2) If immediate patching is not possible, implement mitigations to limit exposure:
- Disable or restrict RARP service if not required in your network design.
- Segment the affected devices on trusted network segments to reduce ARP traffic exposure.
- Implement network access controls to limit which devices can participate in ARP and RARP communications.
- 3) Enhance monitoring and detection:
- Enable monitoring for unsolicited ARP replies and unusual ARP traffic patterns on devices running VxWorks.
- Deploy intrusion detection or anomaly detection capable of flagging ARP-related anomalies.
- 4) Asset and patch management:
- Maintain an up-to-date inventory of VxWorks-based devices, with remediation status tracked.
- Plan regular vulnerability scanning and timely patch management to prevent recurrence.
- 5) Validate fixes in a test environment before production deployment and verify that normal ARP operations are unaffected after remediation.
References
Industries Affected
Below is a list of industries most commonly impacted or potentially at risk based on intelligence.
