CVE-2021-38447CWE-405
OCI OpenDDS Secure Amplification
High · published May 5, 2022
What it is
OCI OpenDDS versions prior to 3.18.1 are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic, which may result in a denial-of-service condition.
The record
Technical detail
- CVSS v3.1
- 8.6 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.02137 · 81.9th percentile
- Weakness
- CWE-405 · Asymmetric Resource Consumption (Amplification)
- Published
- 2022-05-05T15:18Z
EPSS history
Timeline