Multiple industrial products are affected by a vulnerability in the kernel known as TCP SACK PANIC. The kernel used in some products is affected by an integer overflow when handling TCP Selective Acknowledgements. A remote attacker could use this to cause a denial of service.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

Three flaws were found in the Linux kernel's handling of TCP networking. The most severe vulnerability could allow a remote attacker to trigger a kernel panic in systems running the affected software and, as a result, impact the system's availability. The issues have been assigned multiple CVEs: CVE-2019-11479, CVE-2019-11478 and CVE-2019- 11479. They are all considered as HIGH severity. The first two are related to the Selective Acknowledgement (SACK) packets combined with Maximum Segment Size (MSS), the third solely with the Maximum Segment Size (MSS). A remote attacker can use these flaws to cause a denial of service (DoS) by sending a sequence of crafted packets on a TCP connection.


This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

Three flaws were found in the Linux kernel's handling of TCP networking. The most severe vulnerability could allow a remote attacker to trigger a kernel panic in systems running the affected software and, as a result, impact the system's availability. The issues have been assigned multiple CVEs: CVE-2019-11478, CVE-2019-11478 and CVE-2019- 11479. They are all considered as HIGH severity. The first two are related to the Selective Acknowledgement (SACK) packets combined with Maximum Segment Size (MSS), the third solely with the Maximum Segment Size (MSS). A remote attacker can use these flaws to cause a denial of service (DoS) by sending a sequence of crafted packets on a TCP connection.


This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

Multiple industrial products are affected by a vulnerability in the kernel known as TCP SACK PANIC. An attacker with network access to affected products could cause a denial of service condition because of a vulnerability in the TCP retransmission queue implementation kernel when handling TCP Selective Acknowledgements (SACK).

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit f070ef2ac66716357066b683fb0baf55f8191a2e.

An analysis for SPRECON-E systems lead to the result, that only FALCON (PU244x) and T3 MC33/34 product series are affected.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

ID	Name	Product	Family	Published	Updated	Severity
501848	Siemens Industrial Products Integer Overflow or Wraparound (CVE-2019-11477)	Tenable OT Security	Tenable.ot	12/22/2023	10/21/2025	high
503333	Ruckus Wireless ICX Switches Allocation of Resources Without Limits or Throttling (CVE-2019-11479)	Tenable OT Security	Tenable.ot	9/29/2025	10/1/2025	high
503332	Ruckus Wireless ICX Switches Uncontrolled Resource Consumption (CVE-2019-11478)	Tenable OT Security	Tenable.ot	9/29/2025	10/1/2025	high
501849	Siemens Industrial Products Uncontrolled Resource Consumption (CVE-2019-11479)	Tenable OT Security	Tenable.ot	12/22/2023	10/21/2025	high
501750	Sprecher Automation SPRECON-E TCP SACK PANIC (CVE-2019-11478)	Tenable OT Security	Tenable.ot	10/3/2023	10/4/2023	high

Detections

Analytics

Plugins Search

high

high

high

high

high