by Kastro CVE-2021-38487
RTI Connext Professional — Potential Network Amplification and Information Exposure in RTI Connext Professional and Connext Micro
Description · from the CVE record
RTI Connext Professional versions 4.1 to 6.1.0, and Connext Micro versions 2.4 and later are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic. This may result in a denial-of-service condition and information exposure.
Affected
ProductAffectedFixed inSource
Connext Professional4.1 – < 6.1.06.1.0CNA
Connext Micro4.0.0 – < 4.0.*4.0.*CNA
Connext Micro3.0.0 – < 3.0.*3.0.*CNA
Connext Micro2.4.0 – < 2.4.*2.4.*CNA
Scores by source
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
RTI (CNA)8.8CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
RTI (CNA)8.2CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial