Servers and applications

CVE-2019-12259

Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. There is an IPNET security vulnerability: DoS via NULL dereference in IGMP parsing.

Severity: High 7.5
Published: 9 Aug 2019
Last changed: 17 Jun 2026
Added to UpHeron: 1 Nov 2026
Exploit chance: 16% in the next 30 daysHigher than 96% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources: NVD

Affected software

Software Affected versions

Software	Affected versions
SonicWall SonicOSServers and applications · `cpe:o:sonicwall:sonicos`	From 6.5.4.0. up to 6.5.4.3 From 6.5.3.0 up to 6.5.3.3 From 6.5.2.0 up to 6.5.2.3 From 6.5.1.0 up to 6.5.1.4 All 16 release lines From 5.9.0.0 up to 5.9.0.7 From 5.9.1.0. up to 5.9.1.12 From 6.2.0.0 up to 6.2.3.1 From 6.2.4.0 up to 6.2.4.3 From 6.2.5.0 up to 6.2.5.3 From 6.2.6.0 up to 6.2.6.1 From 6.2.7.0 up to 6.2.7.4 Version 6.2.7.0 Version 6.2.7.1 Version 6.2.7.7 From 6.2.9.0 up to 6.2.9.2 From 6.5.0.0 up to 6.5.0.3 From 6.5.1.0 up to 6.5.1.4 From 6.5.2.0 up to 6.5.2.3 From 6.5.3.0 up to 6.5.3.3 From 6.5.4.0. up to 6.5.4.3

SonicWall SonicOSServers and applications · cpe:o:sonicwall:sonicos

From 6.5.4.0. up to 6.5.4.3
From 6.5.3.0 up to 6.5.3.3
From 6.5.2.0 up to 6.5.2.3
From 6.5.1.0 up to 6.5.1.4

All 16 release lines

From 5.9.0.0 up to 5.9.0.7
From 5.9.1.0. up to 5.9.1.12
From 6.2.0.0 up to 6.2.3.1
From 6.2.4.0 up to 6.2.4.3
From 6.2.5.0 up to 6.2.5.3
From 6.2.6.0 up to 6.2.6.1
From 6.2.7.0 up to 6.2.7.4
Version 6.2.7.0
Version 6.2.7.1
Version 6.2.7.7
From 6.2.9.0 up to 6.2.9.2
From 6.5.0.0 up to 6.5.0.3
From 6.5.1.0 up to 6.5.1.4
From 6.5.2.0 up to 6.5.2.3
From 6.5.3.0 up to 6.5.3.3
From 6.5.4.0. up to 6.5.4.3

References

NVD https://nvd.nist.gov/vuln/detail/CVE-2019-12259
CVE.org https://www.cve.org/CVERecord?id=CVE-2019-12259