CVEvulnerability
CVE-2015-3963
5.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-08-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:P
- Weaknesses
- CWE-330
Description
Wind River VxWorks before 5.5.1, 6.5.x through 6.7.x before 6.7.1.1, 6.8.x before 6.8.3, 6.9.x before 6.9.4.4, and 7.x before 7 ipnet_coreip 1.2.2.0, as used on Schneider Electric SAGE RTU devices before J2 and other devices, does not properly generate TCP initial sequence number (ISN) values, which makes it easier for remote attackers to spoof TCP sessions by predicting an ISN value.
Affected configurations
• windriver vxworks (>= 6.5 <= 6.6)
• windriver vxworks (>= 6.7 < 6.7.1.1)
• windriver vxworks (>= 6.8 < 6.8.3)
• windriver vxworks (>= 6.9 < 6.9.4.4)
• windriver vxworks 6.6.3
• windriver vxworks 6.6.4
• windriver vxworks 6.6.4.1
• windriver vxworks 7.0
Related
Weakness · CWE (1)
- CWE-330 Use of Insufficiently Random Values weakness
References
- http://www.schneider-electric.com/ww/en/download/document/SEVD-2015-162-01 Patch, Third Party Advisory
- http://www.securityfocus.com/bid/75302 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1032730 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1033181 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-15-169-01 Third Party Advisory, US Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSA-15-169-01A Third Party Advisory, US Government Resource
- https://security.netapp.com/advisory/ntap-20160324-0001/ Third Party Advisory
- http://www.schneider-electric.com/ww/en/download/document/SEVD-2015-162-01 Patch, Third Party Advisory
- http://www.securityfocus.com/bid/75302 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1032730 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1033181 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-15-169-01 Third Party Advisory, US Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSA-15-169-01A Third Party Advisory, US Government Resource
- https://security.netapp.com/advisory/ntap-20160324-0001/ Third Party Advisory