CVE-2019-12257: Belden Garrettcom Magnum DX940E Firmware

High severity, CVSS 8.8. EPSS: 84.2% chance of exploitation in the next 30 days.

Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. There is an IPNET security vulnerability: Heap overflow in DHCP Offer/ACK parsing inside ipdhcpc.

Affected products

• Belden Garrettcom Magnum DX940E Firmware: up to and including 1.0.1_y7
• Belden Hirschmann Hios: up to and including 07.0.07; up to and including 07.5.01; up to and including 07.2.04; up to and including 05.3.06
• Netapp E-Series Santricity OS Controller: from 8.00, up to and including 8.40.50.00
• Siemens Ruggedcom WIN7000 Firmware: before bs5.2.461.17 (fixed in bs5.2.461.17)
• Siemens Ruggedcom WIN7018 Firmware: before bs5.2.461.17 (fixed in bs5.2.461.17)
• Siemens Ruggedcom WIN7025 Firmware: before bs5.2.461.17 (fixed in bs5.2.461.17)
• Siemens Ruggedcom WIN7200 Firmware: before bs5.2.461.17 (fixed in bs5.2.461.17)
• Siemens Siprotec 5 Firmware: before 7.59 (fixed in 7.59); before 7.91 (fixed in 7.91)
• SonicWall SonicOS: from 5.9.0.0, up to and including 5.9.0.7; from 5.9.1.0., up to and including 5.9.1.12; from 6.2.0.0, up to and including 6.2.3.1; from 6.2.4.0, up to and including 6.2.4.3; from 6.2.5.0, up to and including 6.2.5.3; from 6.2.6.0, up to and including 6.2.6.1; …
• Windriver Vxworks: from 6.5, before 6.9.4 (fixed in 6.9.4)

Published 2019-08-09. Last modified 2026-06-17.