CVE-2021-3435

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

Information leakage in le_ecred_conn_req(). Zephyr versions >= v2.4.0 Use of Uninitialized Resource (CWE-908). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-xhg3-gvj6-4rqh

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-908

Affected software

No affected versions have been published.

Timeline

Published
Jun 28, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-343519.8A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote aCVE-2021-343529.8A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote aCVE-2021-343545.4A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Photo Station. If exploited, this vulnerability aCVE-2021-343555.4A cross-site scripting (XSS) vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, this vulnerability alloCVE-2021-343565.4A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Photo Station. If exploited, this vulnerability aCVE-2021-343576.1A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running QmailAgent. If exploited, this vulnerability alloCVE-2021-343588.8We have already fixed this vulnerability in the following versions of QmailAgent: QmailAgent 3.0.2 ( 2021/08/25 ) and laterCVE-2021-343595.4A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability alCVE-2021-34366.5BT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is known. Zephyr versions >=CVE-2021-343608.8A cross-site request forgery (CSRF) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerabiCVE-2021-343616.1A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability alCVE-2021-343627.2A command injection vulnerability has been reported to affect QNAP device running Media Streaming add-on. If exploited, this vulnerability a
CVE-2021-3435: Low severity, CVSS 3.3 | Vulnix