Servers and applications

CVE-2019-12263

Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4). There is an IPNET security vulnerability: TCP Urgent Pointer state confusion due to race condition.

Severity: High 8.1
Published: 9 Aug 2019
Last changed: 17 Jun 2026
Added to UpHeron: 1 Nov 2026
Exploit chance: 3.2% in the next 30 daysHigher than 88% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources: NVD

Affected software

Software Affected versions

Software	Affected versions
SonicWall SonicOSServers and applications · `cpe:o:sonicwall:sonicos`	From 6.5.4.0. up to 6.5.4.3 From 6.5.3.0 up to 6.5.3.3 From 6.5.2.0 up to 6.5.2.3 From 6.5.1.0 up to 6.5.1.4 All 16 release lines From 5.9.0.0 up to 5.9.0.7 From 5.9.1.0. up to 5.9.1.12 From 6.2.0.0 up to 6.2.3.1 From 6.2.4.0 up to 6.2.4.3 From 6.2.5.0 up to 6.2.5.3 From 6.2.6.0 up to 6.2.6.1 From 6.2.7.0 up to 6.2.7.4 Version 6.2.7.0 Version 6.2.7.1 Version 6.2.7.7 From 6.2.9.0 up to 6.2.9.2 From 6.5.0.0 up to 6.5.0.3 From 6.5.1.0 up to 6.5.1.4 From 6.5.2.0 up to 6.5.2.3 From 6.5.3.0 up to 6.5.3.3 From 6.5.4.0. up to 6.5.4.3

SonicWall SonicOSServers and applications · cpe:o:sonicwall:sonicos

From 6.5.4.0. up to 6.5.4.3
From 6.5.3.0 up to 6.5.3.3
From 6.5.2.0 up to 6.5.2.3
From 6.5.1.0 up to 6.5.1.4

All 16 release lines

From 5.9.0.0 up to 5.9.0.7
From 5.9.1.0. up to 5.9.1.12
From 6.2.0.0 up to 6.2.3.1
From 6.2.4.0 up to 6.2.4.3
From 6.2.5.0 up to 6.2.5.3
From 6.2.6.0 up to 6.2.6.1
From 6.2.7.0 up to 6.2.7.4
Version 6.2.7.0
Version 6.2.7.1
Version 6.2.7.7
From 6.2.9.0 up to 6.2.9.2
From 6.5.0.0 up to 6.5.0.3
From 6.5.1.0 up to 6.5.1.4
From 6.5.2.0 up to 6.5.2.3
From 6.5.3.0 up to 6.5.3.3
From 6.5.4.0. up to 6.5.4.3

References

NVD https://nvd.nist.gov/vuln/detail/CVE-2019-12263
CVE.org https://www.cve.org/CVERecord?id=CVE-2019-12263