CVE-2021-21966CWE-457

An information disclosure vulnerability exists in the HTTP Server /ping.html functionality of Texas Instruments CC3200 SimpleLink Solution NWP 2.9.0.0

Medium · published February 16, 2022

CVSS v3.0
5.3
EPSS
1%
Percentile
72.0
In the wild
Unconfirmed
What it is

An information disclosure vulnerability exists in the HTTP Server /ping.html functionality of Texas Instruments CC3200 SimpleLink Solution NWP 2.9.0.0. A specially-crafted HTTP request can lead to an uninitialized read. An attacker can send an HTTP request to trigger this vulnerability.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01384 · 72.0th percentile
Weakness
CWE-457 · Use of Uninitialized Variable
Published
2022-02-16T16:38Z
EPSS history
Timeline
  • 16 FEB 16:38Z
    An information disclosure vulnerability exists in the HTTP Server /ping.html functionality of Texas Instruments CC3200 SimpleLink Solution NWP 2.9.0.0
    cvelistv5