Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2021-38487

Potential Network Amplification and Information Exposure in RTI Connext Professional and Connext Micro

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

RTI Connext Professional versions 4.1 to 6.1.0, and Connext Micro versions 2.4 and later are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic. This may result in a denial-of-service condition and information exposure.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

RTI Connext Professional

Default version status: unaffected

  • 4.1 to < 6.1.0affected

RTI Connext Micro

Default version status: unaffected

  • 4.0.0 to < 4.0.*affected
  • 3.0.0 to < 3.0.*affected
  • 2.4.0 to < 2.4.*affected

References