CVE-2019-12263: belden garrettcom_magnum_dx940e_firmware Race Condition
CVSS: 8.1v3.1HighModified
Published 09-08-2019Last modified 04-08-2024
Vulnerability summary
CVE-2019-12263 is a high (CVSS 8.1) Race Condition vulnerability in belden garrettcom_magnum_dx940e_firmware. EPSS estimates a 3.16% chance of exploitation in the next 30 days, higher than 87.8% of scored vulnerabilities.
CVSS score
8.1/10
010
High · v3.1 (NVD)EPSS score
3.16%
0%100%
Low · -0.01 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 09-08-2019PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4). There is an IPNET security vulnerability: TCP Urgent Pointer state confusion due to race condition.
CVSS metrics
2 scores · 1 source · 2 versionsHigh 8.1Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HSourcesSingle source
Medium 6.8Preferred score · NVD (NIST)
AV:N/AC:M/Au:N/C:P/I:P/A:PSourcesSingle source
EPSS trend
Probability
3.16%
Chance of exploitation in the next 30 days
Percentile
88%
Versus all other CVEs
30-day change
-0.01 pp
From 3.17% on 20-09-2026
20-09-202620-10-2026
EPSS score3.16%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
- CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.
Affected systems
Siemens6 products
- power_meter_9410_firmware< 2.2.1
- ruggedcom_win7000_firmware< bs5.2.461.17
- ruggedcom_win7018_firmware< bs5.2.461.17
- ruggedcom_win7025_firmware< bs5.2.461.17
- ruggedcom_win7200_firmware< bs5.2.461.17
Belden2 products
- garrettcom_magnum_dx940e_firmware≤ 1.0.1_y7
- hirschmann_hios≤ 07.0.07 | ≤ 07.5.01 | ≤ 07.2.04 | ≤ 05.3.06
Netapp1 product
- e-series_santricity_os_controller≥ 8.00, ≤ 8.40.50.00
Sonicwall1 product
- sonicos≥ 5.9.0.0, ≤ 5.9.0.7 | ≥ 5.9.1.0., ≤ 5.9.1.12 | ≥ 6.2.0.0, ≤ 6.2.3.1 | ≥ 6.2.4.0, ≤ 6.2.4.3 | ≥ 6.2.5.0, ≤ 6.2.5.3 | ≥ 6.2.6.0, ≤ 6.2.6.1 | ≥ 6.2.7.0, ≤ 6.2.7.4 | ≥ 6.2.9.0, ≤ 6.2.9.2 | ≥ 6.5.0.0, ≤ 6.5.0.3 | ≥ 6.5.1.0, ≤ 6.5.1.4 | ≥ 6.5.2.0, ≤ 6.5.2.3 | ≥ 6.5.3.0, ≤ 6.5.3.3 | ≥ 6.5.4.0., ≤ 6.5.4.3 | 6.2.7.0 | 6.2.7.1 | 6.2.7.7
Windriver1 product
- vxworks≥ 6.5, < 6.9.4.12 | 7.0
5 vendors · 11 products
References
9 links- www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/X Refsource CONFIRMVendor Advisory
- support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12263X Refsource CONFIRMVendor Advisory