What’s Vulnerable › Vulnerabilities

CVE-2019-12262

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-08-14 · updated 2026-06-17

Description

Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component. IPNET security vulnerability: Handling of unsolicited Reverse ARP replies (Logical Flaw).

Affected products

• Belden Garrettcom Magnum Dx940E Firmware: through 1.0.1_y7
• Belden Hirschmann HiOS: through 07.0.07; through 07.5.01; through 07.2.04; through 05.3.06
• Siemens Ruggedcom Win7000 Firmware: before bs5.2.461.17 — fixed in bs5.2.461.17
• Siemens Ruggedcom Win7018 Firmware: before bs5.2.461.17 — fixed in bs5.2.461.17
• Siemens Ruggedcom Win7025 Firmware: before bs5.2.461.17 — fixed in bs5.2.461.17
• Siemens Ruggedcom Win7200 Firmware: before bs5.2.461.17 — fixed in bs5.2.461.17
• Windriver Vxworks: 6.6, 6.7, 6.8, 6.9, 7.0

How to fix

Upgrade to a fixed version: Siemens Ruggedcom Win7000 Firmware bs5.2.461.17; Siemens Ruggedcom Win7018 Firmware bs5.2.461.17; Siemens Ruggedcom Win7025 Firmware bs5.2.461.17; Siemens Ruggedcom Win7200 Firmware bs5.2.461.17. Check the vendor advisory for mitigations.

References

• https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf
• https://support.f5.com/csp/article/K41190253
• https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12262
• https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf
• https://support.f5.com/csp/article/K41190253
• https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12262

Get alerted when CVE-2019-12262 or the next vulnerability affects your stack