CVE-2021-38425

Katalog CVE

CVSS 9.1 · Critical EPSS 5,1%

Kerentanan Insufficient Control of Network Message Volume (Network Amplification) pada eprosima fast dds. Skor CVSS 3.1 9.1 (Critical) menurut NVD.

Deskripsi (NVD)

eProsima Fast DDS versions prior to 2.4.0 (#2269) are susceptible to exploitation when an attacker sends a specially crafted packet to flood a target device with unwanted traffic, which may result in a denial-of-service condition and information exposure.

Rincian

Terbit di NVD

5 Mei 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.1 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-406: Insufficient Control of Network Message Volume (Network Amplification)

EPSS (30 hari)

5,1% peluang dieksploitasi; lebih tinggi dari 92,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.cisa.gov/uscert/ics/advisories/icsa-21-315-02 advisory pihak ketiga · pemerintah AS
• https://github.com/eProsima/Fast-DDS product · advisory pihak ketiga