Skip to main content

Garrettcom Magnum Dx940E Firmware

11 CVEs product

Monthly

CVE-2019-12262 Aug 14, 20:15 CRITICAL Act Now

Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Siemens Hirschmann Hios Vxworks Windriver +6
NVD
CVSS 3.1
9.8
EPSS
4.1%
CVE-2019-12261 Aug 09, 21:15 CRITICAL Act Now

Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Oracle Siemens E Series Santricity Os Controller Sonicos +15
NVD
CVSS 3.1
9.8
EPSS
9.0%
CVE-2019-12260 Aug 09, 21:15 CRITICAL Act Now

Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Oracle Siemens E Series Santricity Os Controller Sonicos +15
NVD
CVSS 3.1
9.8
EPSS
22.8%
CVE-2019-12258 Aug 09, 20:15 HIGH POC THREAT This Week

Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Session Fixation Siemens E Series Santricity Os Controller Sonicos +14
NVD GitHub
CVSS 3.1
7.5
EPSS
23.4%
CVE-2019-12255 Aug 09, 20:15 CRITICAL POC THREAT Act Now

Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Siemens E Series Santricity Os Controller Sonicos Sonicwall +13
NVD Exploit-DB
CVSS 3.1
9.8
EPSS
75.2%
CVE-2019-12265 Aug 09, 19:15 MEDIUM This Month

Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Siemens E Series Santricity Os Controller Sonicos Sonicwall +13
NVD
CVSS 3.1
5.3
EPSS
55.3%
CVE-2019-12263 Aug 09, 19:15 HIGH This Week

Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4). Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Buffer Overflow Race Condition Siemens E Series Santricity Os Controller Sonicos +14
NVD
CVSS 3.1
8.1
EPSS
3.2%
CVE-2019-12259 Aug 09, 19:15 HIGH This Week

Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Null Pointer Dereference Siemens Sonicos Sonicwall +12
NVD
CVSS 3.1
7.5
EPSS
15.9%
CVE-2019-12257 Aug 09, 18:15 HIGH This Week

Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Siemens E Series Santricity Os Controller Sonicos Sonicwall +11
NVD
CVSS 3.1
8.8
EPSS
84.2%
CVE-2019-12256 Aug 09, 18:15 CRITICAL Act Now

Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Siemens E Series Santricity Os Controller Sonicos Sonicwall +13
NVD
CVSS 3.1
9.8
EPSS
26.6%
CVE-2019-12264 Aug 05, 18:15 HIGH This Week

Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component. Rated high severity (CVSS 7.1), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Siemens Hirschmann Hios Vxworks Windriver +6
NVD
CVSS 3.1
7.1
EPSS
8.3%
EPSS 4% CVSS 9.8
CRITICAL Act Now

Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Siemens Hirschmann Hios +8
NVD
EPSS 9% CVSS 9.8
CRITICAL Act Now

Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Oracle Siemens +17
NVD
EPSS 23% CVSS 9.8
CRITICAL Act Now

Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Oracle Siemens +17
NVD
EPSS 23% CVSS 7.5
HIGH POC THREAT This Week

Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Session Fixation Siemens +16
NVD GitHub
EPSS 75% CVSS 9.8
CRITICAL POC THREAT Act Now

Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Siemens E Series Santricity Os Controller +15
NVD Exploit-DB
EPSS 55% CVSS 5.3
MEDIUM This Month

Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Siemens E Series Santricity Os Controller +15
NVD
EPSS 3% CVSS 8.1
HIGH This Week

Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4). Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Buffer Overflow Race Condition Siemens +16
NVD
EPSS 16% CVSS 7.5
HIGH This Week

Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Null Pointer Dereference Siemens +14
NVD
EPSS 84% CVSS 8.8
HIGH This Week

Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Siemens E Series Santricity Os Controller +13
NVD
EPSS 27% CVSS 9.8
CRITICAL Act Now

Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Siemens E Series Santricity Os Controller +15
NVD
EPSS 8% CVSS 7.1
HIGH This Week

Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component. Rated high severity (CVSS 7.1), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Siemens Hirschmann Hios +8
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy