Lucene search

[email protected]CVE-2021-22671

HistoryMay 07, 2021 - 2:15 p.m.

CVE-2021-22671

2021-05-0714:15:07

CWE-190

[email protected]

web.nvd.nist.gov

cve

2021

22671

integer overflow

remote code execution

simplelink wi-fi

msp432e4 sdk

cc32xx sdk

cc13x0 sdk

cc13x2

cc26xx sdk

cc3200 sdk

cc3100 sdk

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.9%

JSON

Multiple integer overflow issues exist while processing long domain names, which may allow an attacker to remotely execute code on the SimpleLink Wi-Fi (MSP432E4 SDK: v4.20.00.12 and prior, CC32XX SDK v4.30.00.06 and prior, CC13X0 SDK versions prior to v4.10.03, CC13X2 and CC26XX SDK versions prior to v4.40.00, CC3200 SDK v1.5.0 and prior, CC3100 SDK v1.3.0 and prior).

Affected configurations

NVD

Node

ticc3100_software_development_kitRange≤1.3.0

ticc3200_software_development_kitRange≤1.5.0

tisimplelink_cc13x0_software_development_kitRange<4.10.03

tisimplelink_cc13x2_software_development_kitRange<4.40.00

tisimplelink_cc26xx_software_development_kitRange<4.40.00

tisimplelink_cc32xx_software_development_kitRange≤4.30.00.06

tisimplelink_msp432e4_software_development_kitRange≤4.20.00.12

CPENameOperatorVersion
ti:cc3100_software_development_kitti cc3100 software development kitle1.3.0
ti:cc3200_software_development_kitti cc3200 software development kitle1.5.0
ti:simplelink_cc13x0_software_development_kitti simplelink cc13x0 software development kitlt4.10.03
ti:simplelink_cc13x2_software_development_kitti simplelink cc13x2 software development kitlt4.40.00
ti:simplelink_cc26xx_software_development_kitti simplelink cc26xx software development kitlt4.40.00
ti:simplelink_cc32xx_software_development_kitti simplelink cc32xx software development kitle4.30.00.06
ti:simplelink_msp432e4_software_development_kitti simplelink msp432e4 software development kitle4.20.00.12

CPE	Name	Operator	Version
ti:cc3100_software_development_kit	ti cc3100 software development kit	le	1.3.0
ti:cc3200_software_development_kit	ti cc3200 software development kit	le	1.5.0
ti:simplelink_cc13x0_software_development_kit	ti simplelink cc13x0 software development kit	lt	4.10.03
ti:simplelink_cc13x2_software_development_kit	ti simplelink cc13x2 software development kit	lt	4.40.00
ti:simplelink_cc26xx_software_development_kit	ti simplelink cc26xx software development kit	lt	4.40.00
ti:simplelink_cc32xx_software_development_kit	ti simplelink cc32xx software development kit	le	4.30.00.06
ti:simplelink_msp432e4_software_development_kit	ti simplelink msp432e4 software development kit	le	4.20.00.12

CNA Affected

[
  {
    "product": "SimpleLink Wi-Fi, MSP432, CC13XX, CC26XX, CC32XX, CC3100",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "MSP432E4 SDK: v4.20.00.12 and prior, CC32XX SDK v4.30.00.06 and prior, CC13X0 SDK versions prior to v4.10.03, CC13X2 and CC26XX SDK versions prior to v4.40.00, CC3200 SDK v1.5.0 and prior, CC3100 SDK v1.3.0 and prior"
      }
    ]
  }
]

References

us-cert.cisa.gov/ics/advisories/icsa-21-119-01

Social References

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.9%

JSON

Related for CVE-2021-22671

cvelist1 nvd1 prion1 ics1