CVE-2015-3963

Wind River VxWorks before 5.5.1, 6.5.x through 6.7.x before 6.7.1.1, 6.8.x before 6.8.3, 6.9.x before 6.9.4.4, and 7.x before 7 ipnet_coreip 1.2.2.0, as used on Schneider Electric SAGE RTU devices before J2 and other devices, does not properly generate TCP initial sequence number (ISN) values, which makes it easier for remote attackers to spoof TCP sessions by predicting an ISN value.

• CWE-330

• http://www.schneider-electric.com/ww/en/download/document/SEVD-2015-162-01Patch, Third Party Advisory
• http://www.securityfocus.com/bid/75302Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032730Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1033181Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-15-169-01Third Party Advisory, US Government Resource
• https://ics-cert.us-cert.gov/advisories/ICSA-15-169-01AThird Party Advisory, US Government Resource
• https://security.netapp.com/advisory/ntap-20160324-0001/Third Party Advisory
• http://www.schneider-electric.com/ww/en/download/document/SEVD-2015-162-01Patch, Third Party Advisory
• http://www.securityfocus.com/bid/75302Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032730Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1033181Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-15-169-01Third Party Advisory, US Government Resource
• https://ics-cert.us-cert.gov/advisories/ICSA-15-169-01AThird Party Advisory, US Government Resource
• https://security.netapp.com/advisory/ntap-20160324-0001/Third Party Advisory

Published

Aug 4, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-3957Hospira LifeCare PCA Infusion System before 7.0 stores priva…
• CVE-2015-3958Hospira LifeCare PCA Infusion System 5.0 and earlier, and po…
• CVE-2015-3959The firmware in MNS before 4.5.6 on Belden GarrettCom Magnum…
• CVE-2015-3960The firmware in MNS before 4.5.6 on Belden GarrettCom Magnum…
• CVE-2015-3961The web-server component in MNS before 4.5.6 on Belden Garre…
• CVE-2015-3962Schneider Electric StruxureWare Building Expert MPM before 2…
• CVE-2015-3964SMA Solar Sunny WebBox has hardcoded passwords, which makes …
• CVE-2015-3965Hospira Symbiq Infusion System 3.13 and earlier allows remot…
• CVE-2015-3966The IPsec SA establishment process on Innominate mGuard devi…
• CVE-2015-3967Cross-site request forgery (CSRF) vulnerability on Janitza U…
• CVE-2015-3968The FTP service on Janitza UMG 508, 509, 511, 604, and 605 d…
• CVE-2015-3969Janitza UMG 508, 509, 511, 604, and 605 devices allow remote…