CVE-2021-38443CWE-228

Eclipse CycloneDDS Improper Handling of Syntactically Invalid Structure

Medium · published May 5, 2022

CVSS v3.1
6.6
EPSS
2%
Percentile
81.8
In the wild
Unconfirmed
What it is

Eclipse CycloneDDS versions prior to 0.8.0 improperly handle invalid structures, which may allow an attacker to write arbitrary values in the XML parser.

The record
Technical detail
CVSS v3.1
6.6 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.02128 · 81.8th percentile
Weakness
CWE-228 · Improper Handling of Syntactically Invalid Structure
Published
2022-05-05T15:16Z
EPSS history
Timeline
  • 05 MAY 15:16Z
    Eclipse CycloneDDS Improper Handling of Syntactically Invalid Structure
    cvelistv5