Servers and applications

CVE-2019-12261

Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4). This is an IPNET security vulnerability: TCP Urgent Pointer state confusion during connect() to a remote host.

Severity: Critical 9.8
Published: 9 Aug 2019
Last changed: 17 Jun 2026
Added to UpHeron: 1 Nov 2026
Exploit chance: 9% in the next 30 daysHigher than 95% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources: NVD

Affected software

Software Affected versions

Software	Affected versions
SonicWall SonicOSServers and applications · `cpe:o:sonicwall:sonicos`	From 6.5.4.0. up to 6.5.4.3 From 6.5.3.0 up to 6.5.3.3 From 6.5.2.0 up to 6.5.2.3 From 6.5.1.0 up to 6.5.1.4 All 16 release lines From 5.9.0.0 up to 5.9.0.7 From 5.9.1.0. up to 5.9.1.12 From 6.2.0.0 up to 6.2.3.1 From 6.2.4.0 up to 6.2.4.3 From 6.2.5.0 up to 6.2.5.3 From 6.2.6.0 up to 6.2.6.1 From 6.2.7.0 up to 6.2.7.4 Version 6.2.7.0 Version 6.2.7.1 Version 6.2.7.7 From 6.2.9.0 up to 6.2.9.2 From 6.5.0.0 up to 6.5.0.3 From 6.5.1.0 up to 6.5.1.4 From 6.5.2.0 up to 6.5.2.3 From 6.5.3.0 up to 6.5.3.3 From 6.5.4.0. up to 6.5.4.3

SonicWall SonicOSServers and applications · cpe:o:sonicwall:sonicos

From 6.5.4.0. up to 6.5.4.3
From 6.5.3.0 up to 6.5.3.3
From 6.5.2.0 up to 6.5.2.3
From 6.5.1.0 up to 6.5.1.4

All 16 release lines

From 5.9.0.0 up to 5.9.0.7
From 5.9.1.0. up to 5.9.1.12
From 6.2.0.0 up to 6.2.3.1
From 6.2.4.0 up to 6.2.4.3
From 6.2.5.0 up to 6.2.5.3
From 6.2.6.0 up to 6.2.6.1
From 6.2.7.0 up to 6.2.7.4
Version 6.2.7.0
Version 6.2.7.1
Version 6.2.7.7
From 6.2.9.0 up to 6.2.9.2
From 6.5.0.0 up to 6.5.0.3
From 6.5.1.0 up to 6.5.1.4
From 6.5.2.0 up to 6.5.2.3
From 6.5.3.0 up to 6.5.3.3
From 6.5.4.0. up to 6.5.4.3

References

NVD https://nvd.nist.gov/vuln/detail/CVE-2019-12261
CVE.org https://www.cve.org/CVERecord?id=CVE-2019-12261