CVE-2015-3963: Medium severity wind river vxworks vulnerability
Wind River VxWorks before 5.5.1, 6.5.x through 6.7.x before 6.7.1.1, 6.8.x before 6.8.3, 6.9.x before 6.9.4.4, and 7.x before 7 ipnetcoreip 1.2.2.0, as used on Schneider Electric SAGE RTU devices before J2 and other devices, does not properly generate TCP initial sequence number (ISN) values, which makes it easier for remote attackers to spoof TCP sessions by predicting an ISN value.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-3963?
CVE-2015-3963 is classified as a high severity vulnerability due to improper generation of TCP initial sequence number values.
How do I fix CVE-2015-3963?
To mitigate CVE-2015-3963, update VxWorks to a version that is 5.5.1 or higher, or to 6.7.1.1 or higher for affected 6.5.x to 6.9.x versions.
Which versions of Wind River VxWorks are affected by CVE-2015-3963?
CVE-2015-3963 affects Wind River VxWorks versions prior to 5.5.1, 6.5.x through 6.7.x before 6.7.1.1, 6.8.x before 6.8.3, and 6.9.x before 6.9.4.4.
What devices commonly use the vulnerable versions of VxWorks related to CVE-2015-3963?
Schneider Electric SAGE RTU devices are commonly affected by CVE-2015-3963 due to their use of vulnerable VxWorks versions.
Can CVE-2015-3963 lead to remote code execution?
Yes, CVE-2015-3963 can potentially be exploited to facilitate remote code execution due to TCP sequence number manipulation.