Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET security vulnerability: Stack overflow in the parsing of IPv4 packets’ IP options.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HBelden Garrettcom Magnum Dx940e
HWBeldenall versionsBelden Garrettcom Magnum Dx940e Firmware
OSBelden≤ 1.0.1_y7Belden Hirschmann Dragon Mach4000
HWBeldenall versionsBelden Hirschmann Dragon Mach4500
HWBeldenall versionsBelden Hirschmann Eagle20
HWBeldenall versionsBelden Hirschmann Eagle30
HWBeldenall versionsBelden Hirschmann Eagle One
HWBeldenall versionsBelden Hirschmann Ees20
HWBeldenall versionsBelden Hirschmann Ees25
HWBeldenall versionsBelden Hirschmann Eesx20
HWBeldenall versionsBelden Hirschmann Eesx30
HWBeldenall versionsBelden Hirschmann Grs1020
HWBeldenall versionsBelden Hirschmann Grs1030
HWBeldenall versionsBelden Hirschmann Grs1042
HWBeldenall versionsBelden Hirschmann Grs1120
HWBeldenall versionsBelden Hirschmann Grs1130
HWBeldenall versionsBelden Hirschmann Grs1142
HWBeldenall versionsBelden Hirschmann Hios
OSBelden≤ 07.2.04≤ 07.0.07≤ 07.5.01≤ 05.3.06Belden Hirschmann Msp30
HWBeldenall versionsBelden Hirschmann Msp32
HWBeldenall versionsBelden Hirschmann Msp40
HWBeldenall versionsBelden Hirschmann Octopus Os3
HWBeldenall versionsBelden Hirschmann Rail Switch Power Lite
HWBeldenall versionsBelden Hirschmann Rail Switch Power Smart
HWBeldenall versionsBelden Hirschmann Red25
HWBeldenall versionsBelden Hirschmann Rsp20
HWBeldenall versionsBelden Hirschmann Rsp25
HWBeldenall versionsBelden Hirschmann Rsp30
HWBeldenall versionsBelden Hirschmann Rsp35
HWBeldenall versionsBelden Hirschmann Rspe30
HWBeldenall versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Memory
CWE
References
Related vulnerabilities
CVE-2024-53704CRITICAL9.8⚠ KEVPL ✓same product
SonicWall SonicOS SSLVPN — pominięcie uwierzytelnienia (Auth Bypass)
CVE-2024-40766CRITICAL9.8⚠ KEVPL ✓same product
Nieprawidłowa kontrola dostępu w SonicWall SonicOS — RCE i crash firewalla
CVE-2020-5135CRITICAL9.8⚠ KEVPL ✓same product
Buffer overflow w SonicOS umożliwiający DoS i zdalne wykonanie kodu
CVE-2025-40600CRITICAL9.8PL ✓same product
SonicOS SSL VPN: format string umożliwia zakłócenie usługi bez uwierzytelnienia
CVE-2024-3596CRITICAL9.0PL ✓same product
Atak przez fałszowanie odpowiedzi w protokole RADIUS (RFC 2865) via kolizja MD5