CVE-2021-38433

low-risk

Published 2022-05-05

RTI Connext DDS Professional and Connext DDS Secure Versions 4.2x to 6.1.0 vulnerable to a stack-based buffer overflow, which may allow a local attacker to execute arbitrary code.

Do I need to act?

0.10% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 6.6/10 Medium

LOCAL / LOW complexity

Affected Products (2)

Connext Professional

Connext Secure

Affected Vendors

Rti

References (4)

Permissions Required https://support.rti.com/s/login/?ec=302&startURL=%2Fs%2F

Third Party Advisory https://www.cisa.gov/uscert/ics/advisories/icsa-21-315-02

Permissions Required https://support.rti.com/s/login/?ec=302&startURL=%2Fs%2F

Third Party Advisory https://www.cisa.gov/uscert/ics/advisories/icsa-21-315-02

/ 100

low-risk

Severity 21/34 · High

Exploitability 0/34 · Minimal

Exposure 7/34 · Low