CVE-2015-3963

Summary

CVE	CVE-2015-3963
State	PUBLISHED
Assigner	icscert
Source Priority	CVE Program / NVD first with legacy fallback
Published	2015-08-04 01:59:07 UTC
Updated	2026-05-06 22:30:45 UTC
Description	Wind River VxWorks before 5.5.1, 6.5.x through 6.7.x before 6.7.1.1, 6.8.x before 6.8.3, 6.9.x before 6.9.4.4, and 7.x before 7 ipnet_coreip 1.2.2.0, as used on Schneider Electric SAGE RTU devices before J2 and other devices, does not properly generate TCP initial sequence number (ISN) values, which makes it easier for remote attackers to spoof TCP sessions by predicting an ISN value.

Primary CVSS: v2.0 5.8 from [email protected]

AV:N/AC:M/Au:N/C:N/I:P/A:P

Problem Types: CWE-330 | n/a

Access Vector

Network

Access Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

Partial

Availability

Partial

AV:N/AC:M/Au:N/C:N/I:P/A:P

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Windriver	Vxworks	All	All	All	All
Operating System	Windriver	Vxworks	All	All	All	All

Source	Vendor	Product	Version	Platforms
CNA	Na	N/a	affected n/a	Not specified

Reference	Source	Link	Tags
VxWorks Predictable TCP Sequence Number Generation Lets Remote Users Deny Service or Spoof Connections - SecurityTracker	af854a3a-2127-422b-91ae-364da2661108	www.securitytracker.com	Third Party Advisory, VDB Entry
Wind River VXWorks TCP Predictability Vulnerability in ICS Devices (Update B) \| CISA	af854a3a-2127-422b-91ae-364da2661108	ics-cert.us-cert.gov	Third Party Advisory, US Government Resource
Wind River VxWorks CVE-2015-3963 Predictable TCP Initial Sequence Security Bypass Vulnerability	af854a3a-2127-422b-91ae-364da2661108	www.securityfocus.com	Third Party Advisory, VDB Entry
Wind River VXWorks TCP Predictability Vulnerability in ICS Devices (Update B) \| CISA	af854a3a-2127-422b-91ae-364da2661108	ics-cert.us-cert.gov	Third Party Advisory, US Government Resource
Security Notification - SAGE RTU - Download Schneider Electric	af854a3a-2127-422b-91ae-364da2661108	www.schneider-electric.com	Patch, Third Party Advisory
CVE-2015-3963 VxWorks Vulnerability impacting NetApp E-Series/EF-Series SANtricity OS Controller Firmware \| NetApp Product Security	af854a3a-2127-422b-91ae-364da2661108	security.netapp.com	Third Party Advisory
Schneider Electric SAGE Remote Terminal Unit Predictable TCP Sequence Numbers Let Remote Users Spoof TCP Connections - SecurityTracker	af854a3a-2127-422b-91ae-364da2661108	www.securitytracker.com	Third Party Advisory, VDB Entry
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

591377 ABB Relion 670 series Version 2.0 Transmission Control Protocol (TCP) Predictability Multiple Vulnerabilities (1MRG023264)
591383 ABB RTU500 series "Transmission Control Protocol (TCP) Predictability Multiple Vulnerabilities (ABB-VU-PGGA-1KGT090284)
591384 ABB Relion 670 series "Transmission Control Protocol (TCP) Predictability Multiple Vulnerabilities (1MRG028797)
591399 General Electric D20MX Transmission Control Protocol (TCP) Initial Sequence Number Vulnerability (PRBT-0375)