Description
RTI Connext Professional versions 4.1 to 6.1.0, and Connext Micro versions 2.4 and later are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic. This may result in a denial-of-service condition and information exposure.
Metrics
CVSS 3.1 9.1/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| RTI | Connext Professional | >= 4.1, < 6.1.0 |
| RTI | Connext Micro | >= 4.0.0, < 4.0.*; >= 3.0.0, < 3.0.*; >= 2.4.0, < 2.4.* |
References
- https://support.rti.com/s/login/?ec=302&startURL=%2Fs%2FPermissions Required, Vendor Advisory
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-315-02Third Party Advisory, US Government Resource
- https://www.rti.com/vulnerabilities/#cve-2021-38487
- https://support.rti.com/s/login/?ec=302&startURL=%2Fs%2FPermissions Required, Vendor Advisory
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-315-02Third Party Advisory, US Government Resource
Timeline
- Published
- May 5, 2022
- Last modified
- Jun 17, 2026
- NVD status
- Modified