CVE-2019-12258
HIGHURGENT/11 Scanner, Based on Detection Tool by Armis
Title source: metasploitDescription
Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. This is a IPNET security vulnerability: DoS of TCP connection via malformed TCP options.
Exploits (1)
metasploit
SCANNER
by Ben Seri, Brent Cook, wvu · rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/vxworks/urgent11_check.rb
References (9)
Scores
CVSS v3
7.5
EPSS
0.1164
EPSS Percentile
93.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Classification
CWE
CWE-384
Status
published
Affected Products (17)
windriver/vxworks
< 6.9.4.12
windriver/vxworks
sonicwall/sonicos
< 5.9.0.7
sonicwall/sonicos
sonicwall/sonicos
sonicwall/sonicos
siemens/siprotec_5_firmware
< 7.59
netapp/e-series_santricity_os_controller
< 8.40.50.00
siemens/siprotec_5_firmware
< 7.91
siemens/power_meter_9410_firmware
< 2.2.1
siemens/power_meter_9810_firmware
siemens/ruggedcom_win7000_firmware
< bs5.2.461.17
siemens/ruggedcom_win7018_firmware
< bs5.2.461.17
siemens/ruggedcom_win7025_firmware
< bs5.2.461.17
siemens/ruggedcom_win7200_firmware
< bs5.2.461.17
... and 2 more
Timeline
Published
Aug 09, 2019
Tracked Since
Feb 18, 2026