CVE-2021-38487

moderate-risk
Published 2022-05-05

RTI Connext Professional versions 4.1 to 6.1.0, and Connext Micro versions 2.4 and later are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic. This may result in a denial-of-service condition and information exposure.

Do I need to act?

-
0.10% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.2/10 High
NETWORK / LOW complexity

Affected Products (3)

Connext Dds Micro
Connext Secure

Affected Vendors

Rti

References (5)

Permissions Required https://support.rti.com/s/login/?ec=302&startURL=%2Fs%2F
Third Party Advisory https://www.cisa.gov/uscert/ics/advisories/icsa-21-315-02
https://www.rti.com/vulnerabilities/#cve-2021-38487
Permissions Required https://support.rti.com/s/login/?ec=302&startURL=%2Fs%2F
Third Party Advisory https://www.cisa.gov/uscert/ics/advisories/icsa-21-315-02
37
/ 100
moderate-risk
Severity 28/34 · Critical
Exploitability 0/34 · Minimal
Exposure 9/34 · Low