07.1.02

DATE	CVE	VULNERABILITY TITLE	RISK
2021-05-17	CVE-2021-27734	Improper Authentication vulnerability in Belden Hirschmann Hios and Hisecos Hirschmann HiOS 07.1.01, 07.1.02, and 08.1.00 through 08.5.xx and HiSecOS 03.3.00 through 03.5.01 allow remote attackers to change the credentials of existing users. network low complexity belden CWE-287 critical	9.8
2019-08-14	CVE-2019-12262	Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component. network low complexity windriver belden siemens critical	9.8
2019-08-09	CVE-2019-12261	Classic Buffer Overflow vulnerability in multiple products Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4). network low complexity windriver sonicwall siemens netapp oracle belden CWE-120 critical	9.8
2019-08-09	CVE-2019-12260	Classic Buffer Overflow vulnerability in multiple products Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4). network low complexity windriver sonicwall siemens netapp oracle belden CWE-120 critical	9.8
2019-08-09	CVE-2019-12258	Session Fixation vulnerability in multiple products Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. network low complexity windriver sonicwall siemens netapp belden CWE-384	7.5
2019-08-09	CVE-2019-12255	Classic Buffer Overflow vulnerability in multiple products Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). network low complexity windriver netapp sonicwall siemens belden CWE-120 critical	9.8
2019-08-09	CVE-2019-12265	Memory Leak vulnerability in multiple products Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. network low complexity windriver sonicwall siemens netapp belden CWE-401	5.3
2019-08-09	CVE-2019-12263	Out-of-bounds Write vulnerability in multiple products Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4). network high complexity windriver sonicwall siemens netapp belden CWE-787	8.1
2019-08-09	CVE-2019-12259	NULL Pointer Dereference vulnerability in multiple products Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. network low complexity windriver sonicwall siemens belden CWE-476	7.5
2019-08-09	CVE-2019-12257	Classic Buffer Overflow vulnerability in multiple products Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. low complexity windriver sonicwall siemens netapp belden CWE-120	8.8