CVE-2021-38487

Katalog CVE

CVSS 9.1 · Critical EPSS 3,4%

Kerentanan Insufficient Control of Network Message Volume (Network Amplification) pada rti connext dds micro, rti connext professional +1 lainnya. Skor CVSS 3.1 9.1 (Critical) menurut NVD.

Deskripsi (NVD)

RTI Connext Professional versions 4.1 to 6.1.0, and Connext Micro versions 2.4 and later are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic. This may result in a denial-of-service condition and information exposure.

Rincian

Terbit di NVD

5 Mei 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.1 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-406: Insufficient Control of Network Message Volume (Network Amplification)
CWE-923: Improper Restriction of Communication Channel to Intended Endpoints

EPSS (30 hari)

3,4% peluang dieksploitasi; lebih tinggi dari 88,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.rti.com/s/login/?ec=302&startURL=%2Fs%2F permissions required · advisory vendor
• https://www.cisa.gov/uscert/ics/advisories/icsa-21-315-02 advisory pihak ketiga · pemerintah AS
• https://www.rti.com/vulnerabilities/#cve-2021-38487