Description (CNA)
RTI Connext Professional versions 4.1 to 6.1.0, and Connext Micro versions 2.4 and later are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic. This may result in a denial-of-service condition and information exposure.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| RTI / Connext Professional | affected 4.1 before 6.1.0 |
| RTI / Connext Micro | affected 4.0.0 before 4.0.*; affected 3.0.0 before 3.0.*; affected 2.4.0 before 2.4.* |
CWE
CWE-406, CWE-923
References
- https://www.rti.com/vulnerabilities/#cve-2021-38487
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-315-02
- https://support.rti.com/s/login/?ec=302&startURL=%2Fs%2F
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.