CVE-2021-38441CWE-123
Eclipse CycloneDDS Write-what-where Condition
Medium · published May 5, 2022
What it is
Eclipse CycloneDDS versions prior to 0.8.0 are vulnerable to a write-what-where condition, which may allow an attacker to write arbitrary values in the XML parser.
The record
Technical detail
- CVSS v3.1
- 6.6 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.02146 · 81.9th percentile
- Weakness
- CWE-123 · Write-what-where Condition
- Published
- 2022-05-05T15:15Z
EPSS history
Timeline