PT-2022-10732 · Real Time Innovations · Connext Dds Secure+2

Published 2022-05-05 · Updated 2025-06-23 · CVE-2021-38487

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions RTI Connext DDS Professional versions 4.2x through 6.1.0 Connext DDS Secure versions 4.2x through 6.1.0 Connext DDS Micro versions 2.4 and later

Description The issue arises when an attacker sends a specially crafted packet to flood target devices with unwanted traffic, potentially resulting in a denial-of-service condition and information exposure.

Recommendations For RTI Connext DDS Professional versions 4.2x through 6.1.0, consider implementing traffic filtering to prevent unwanted packets. For Connext DDS Secure versions 4.2x through 6.1.0, restrict access to the network to minimize the risk of exploitation. For Connext DDS Micro versions 2.4 and later, avoid using the software in critical infrastructure until a patch is available. As a temporary workaround, consider disabling the reception of external packets until a fix is implemented.

Fix

DoS

Weakness Enumeration

CWE-406

CWE-923

Related Identifiers

CVE-2021-38487

Affected Products

Connext Dds Micro

Connext Dds Secure

Rti Connext Professional

References · 9

• https://osv.dev/vulnerability/CVE-2021-38487 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-38487 · Security Note
• https://support.rti.com/s/login/?ec=302&startURL=%2Fs%2F · Vendor Advisory
• https://cisa.gov/uscert/ics/advisories/icsa-21-315-02 · Note
• https://t.me/cvenotify/30172 · Telegram Post
• https://t.me/cibsecurity/42001 · Telegram Post
• https://t.me/cvenotify/110091 · Telegram Post
• https://t.me/cvenotify/126375 · Telegram Post
• https://rti.com/vulnerabilities/#cve-2021-38487 · Note