CVE-2021-20988CWE-119

Hilscher rcX RTOS: Wrong handling of the UDP checksum

High · published May 13, 2021

CVSS v3.1
8.6
EPSS
1%
Percentile
62.2
In the wild
Unconfirmed
What it is

In Hilscher rcX RTOS versions prios to V2.1.14.1 the actual UDP packet length is not verified against the length indicated by the packet. This may lead to a denial of service of the affected device.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00990 · 62.2th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2021-05-13T13:45Z
EPSS history
Timeline
  • 13 MAY 13:45Z
    Hilscher rcX RTOS: Wrong handling of the UDP checksum
    cvelistv5