Lucene search

[email protected]CVE-2021-22677

HistoryMay 07, 2021 - 4:15 p.m.

CVE-2021-22677

2021-05-0716:15:08

CWE-190

[email protected]

web.nvd.nist.gov

cve-2021-22677

integer overflow

host mcu

simplelink wi-fi

denial-of-service

code execution

nvd

vulnerability

security bug

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.9 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.6%

JSON

An integer overflow exists in the APIs of the host MCU while trying to connect to a WIFI network may lead to issues such as a denial-of-service condition or code execution on the SimpleLink Wi-Fi (MSP432E4 SDK: v4.20.00.12 and prior, CC32XX SDK v4.30.00.06 and prior, CC13X0 SDK versions prior to v4.10.03, CC13X2 and CC26XX SDK versions prior to v4.40.00, CC3200 SDK v1.5.0 and prior, CC3100 SDK v1.3.0 and prior).

Affected configurations

NVD

Node

ticc3100_software_development_kitRange≤1.3.0

ticc3200_software_development_kitRange≤1.5.0

tisimplelink_cc13x0_software_development_kitRange<4.10.03

tisimplelink_cc13x2_software_development_kitRange<4.40.00

tisimplelink_cc26xx_software_development_kitRange<4.40.00

tisimplelink_cc32xx_software_development_kitRange≤4.30.00.06

tisimplelink_msp432e4_software_development_kitRange≤4.20.00.12

CPENameOperatorVersion
ti:cc3100_software_development_kitti cc3100 software development kitle1.3.0
ti:cc3200_software_development_kitti cc3200 software development kitle1.5.0
ti:simplelink_cc13x0_software_development_kitti simplelink cc13x0 software development kitlt4.10.03
ti:simplelink_cc13x2_software_development_kitti simplelink cc13x2 software development kitlt4.40.00
ti:simplelink_cc26xx_software_development_kitti simplelink cc26xx software development kitlt4.40.00
ti:simplelink_cc32xx_software_development_kitti simplelink cc32xx software development kitle4.30.00.06
ti:simplelink_msp432e4_software_development_kitti simplelink msp432e4 software development kitle4.20.00.12

CPE	Name	Operator	Version
ti:cc3100_software_development_kit	ti cc3100 software development kit	le	1.3.0
ti:cc3200_software_development_kit	ti cc3200 software development kit	le	1.5.0
ti:simplelink_cc13x0_software_development_kit	ti simplelink cc13x0 software development kit	lt	4.10.03
ti:simplelink_cc13x2_software_development_kit	ti simplelink cc13x2 software development kit	lt	4.40.00
ti:simplelink_cc26xx_software_development_kit	ti simplelink cc26xx software development kit	lt	4.40.00
ti:simplelink_cc32xx_software_development_kit	ti simplelink cc32xx software development kit	le	4.30.00.06
ti:simplelink_msp432e4_software_development_kit	ti simplelink msp432e4 software development kit	le	4.20.00.12

CNA Affected

[
  {
    "product": "SimpleLink Wi-Fi, MSP432, CC13XX, CC26XX, CC32XX, CC3100",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "MSP432E4 SDK: v4.20.00.12 and prior, CC32XX SDK v4.30.00.06 and prior, CC13X0 SDK versions prior to v4.10.03, CC13X2 and CC26XX SDK versions prior to v4.40.00, CC3200 SDK v1.5.0 and prior, CC3100 SDK v1.3.0 and prior"
      }
    ]
  }
]

References

us-cert.cisa.gov/ics/advisories/icsa-21-119-01

Social References

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.9 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.6%

JSON

Related for CVE-2021-22677

nvd1 prion1 cvelist1 ics1