Oracle Communications Eagle vulnerabilities

4 CVEs affecting Oracle Communications Eagle, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-35198, published 2021-05-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-12260, published 2019-08-09. Critical severity, CVSS 9.8. EPSS: 23.3% chance of exploitation in the next 30 days. Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4). This is an IPNET security vulnerability: TCP Urgent Pointer state confusion caused by a malformed TCP AO…
CVE-2019-12261, published 2019-08-09. Critical severity, CVSS 9.8. EPSS: 9% chance of exploitation in the next 30 days. Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4). This is an IPNET security vulnerability: TCP Urgent Pointer state confusion during connect() to a…
CVE-2020-35198, published 2021-05-12. Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days. An issue was discovered in Wind River VxWorks 7. The memory allocator has a possible integer overflow in calculating a memory block's size to be allocated by calloc(). As a result, the actual memory…
CVE-2020-28895, published 2021-02-03. High severity, CVSS 7.3. EPSS: 1.6% chance of exploitation in the next 30 days. In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc(). As a result, the actual memory allocated is smaller than the buffer…