CVE-2019-12264

CVE-2019-12264 is an Incorrect Access Control vulnerability in the IPv4 assignment of the ipdhcpc DHCP client component within Wind River VxWorks 6.6 through Vx7, affecting products from Belden, Siemens, and Wind River. With a CVSS score of 7.1 (HIGH), this vulnerability can be exploited with low attack complexity over an adjacent network, potentially leading to high availability impact. While there is no evidence of active exploitation or publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered significant community attention with four mentions and four media articles, including reports on critical systems and infusion pumps being affected.