Description
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Routing Service) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.5, from 6.1.0 before 6.1.2.21, from 6.0.0 before 6.0.1.40.
References (1)
Core 1
Core References
Mitigation, Vendor Advisory
https://www.rti.com/vulnerabilities/#cve-2024-52066
Scores
CVSS v3
7.8
EPSS
0.0049
EPSS Percentile
65.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-120
CWE-787
Status
published
Products (1)
rti/connext_professional
6.0.0 - 6.0.1.40
Published
Dec 13, 2024
Tracked Since
Feb 18, 2026