Lucene search

IcscertCVELIST:CVE-2021-38487

HistoryMay 05, 2022 - 3:18 p.m.

CVE-2021-38487 RTI Connext DDS Professional and Connext DDS Secure Network Amplification

2022-05-0515:18:41

CWE-406

icscert

www.cve.org

cve-2021-38487

network amplification

denial-of-service

information exposure

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

9.1

Confidence

High

EPSS

0.002

Percentile

59.1%

JSON

RTI Connext DDS Professional, Connext DDS Secure versions 4.2x to 6.1.0, and Connext DDS Micro versions 2.4 and later are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic. This may result in a denial-of-service condition and information exposure.

CNA Affected

[
  {
    "product": "Connext DDS Professional",
    "vendor": "RTI",
    "versions": [
      {
        "lessThanOrEqual": "6.1.0",
        "status": "affected",
        "version": "4.2x",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Connext DDS Secure",
    "vendor": "RTI",
    "versions": [
      {
        "lessThanOrEqual": "6.1.0",
        "status": "affected",
        "version": "4.2x",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Connext DDS Micro",
    "vendor": "RTI",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "2.4",
        "versionType": "custom"
      }
    ]
  }
]

References

support.rti.com/s/login/?ec=302&startURL=%2Fs%2F

www.cisa.gov/uscert/ics/advisories/icsa-21-315-02

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

9.1

Confidence

High

EPSS

0.002

Percentile

59.1%

JSON

Related for CVELIST:CVE-2021-38487