CVE-2019-12257: Buffer Overflow
Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. There is an IPNET security vulnerability: Heap overflow in DHCP Offer/ACK parsing inside ipdhcpc.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-12257?
CVE-2019-12257 is rated as a high-severity vulnerability due to its potential for remote code execution through a buffer overflow in the DHCP client.
How do I fix CVE-2019-12257?
To address CVE-2019-12257, users should update their Wind River VxWorks or SonicWall SonicOS versions to the latest patches provided by the vendors.
What types of devices are affected by CVE-2019-12257?
CVE-2019-12257 affects devices running Wind River VxWorks 6.6 to 6.9 and various versions of SonicWall SonicOS.
What can attackers achieve through CVE-2019-12257?
Exploiting CVE-2019-12257 could allow attackers to execute arbitrary code remotely, leading to unauthorized access and system control.
Is there any mitigation for CVE-2019-12257 if I cannot patch immediately?
While waiting for patches, disabling the DHCP client or restricting access to affected devices may help mitigate the risk from CVE-2019-12257.