CVE-2021-38487
High
Description
RTI Connext Professional versions 4.1 to 6.1.0, and Connext Micro versions 2.4 and later are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic. This may result in a denial-of-service condition and information exposure.
SeverityHigh
CVSS8.2
Exploit probability—
ProductRti Connext Dds Micro
PublishedMay 5, 2022
First seenMay 5, 2022
Weakness typeCWE-406CWE-406CWE-923CWE-923
How to fix
Update
- rti connext_professional6.1.0 or later
- rti connext_secure6.1.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rti connext_dds_micro | 2.4 ≤ v | — |
| rti connext_professional | 4.2 ≤ v < 6.1.0 | 6.1.0 |
| rti connext_secure | 4.2 ≤ v < 6.1.0 | 6.1.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.