nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2021-38487 CVE-2021-38487
HIGH
Potential Network Amplification and Information Exposure in RTI Connext Professional and Connext Micro
Record summary
CVE-2021-38487 has a selected CVSS score of 8.8 (high).
Description
RTI Connext Professional versions 4.1 to 6.1.0, and Connext Micro versions 2.4 and later are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic. This may result in a denial-of-service condition and information exposure.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 16, 2025 · Source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
Connext MicroBrowse RTI / Connext MicroDefault status: unaffected | CVE List | 4.0.0 to < 4.0.* | affected |
| 3.0.0 to < 3.0.* | affected | ||
| 2.4.0 to < 2.4.* | affected | ||
Connext ProfessionalBrowse RTI / Connext ProfessionalDefault status: unaffected | CVE List | 4.1 to < 6.1.0 | affected |
References
4support.rti.com
https://support.rti.com/s/login?ec=302&startURL=%2Fs%2F cisa.gov
https://www.cisa.gov/uscert/ics/advisories/icsa-21-315-02 rti.com
https://www.rti.com/vulnerabilities