VDB
BDU%3A2020-01282
BDU%3A2020-01282
PUBLISHED
CVSS 10 CRITICAL
Уязвимость протокола TCP операционных систем реального времени Wind River VxWorks, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Belden Inc., Siemens AG, Red Lion Controls, Inc., Wind River Systems, Inc., Oracle Corp. | Hirschmann HiOS, GarrettCom DX, RUGGEDCOM WIN70xxb Base Station, SIPROTEC 5 CPU CP100, SIPROTEC 5 CPU CP300, SIPROTEC 5 CPU CP200, VxWorks, RUGGEDCOM WIN72xx Base Station, Communications EAGLE Software |
Timeline
- Mar 27, 2020 CVE Published
- Nov 17, 2020 CVE Updated
- Mar 19, 2026 Security Advisory
References
- https://www.belden.com/hubfs/support/security/bulletins/Belden_Security_Bulletin_BSECV-2019-05_1v3.pdf?hsLang=en url
- https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf url
- https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf url
- https://security.netapp.com/advisory/ntap-20190802-0001/ url
- https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12260 url
- https://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/ url
- https://www.oracle.com/security-alerts/cpuoct2020.html url
- https://support.f5.com/csp/article/K41190253 advisory
- https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12256 advisory