CVE-2021-42146

An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97

High · published January 24, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
51.0
In the wild
Unconfirmed
What it is

An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers allow remote attackers to reuse the same epoch number within two times the TCP maximum segment lifetime, which is prohibited in RFC6347. This vulnerability allows remote attackers to obtain sensitive application (data of connected clients).

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00662 · 51.0th percentile
Published
2024-01-24T00:00Z
EPSS history
Timeline
  • 24 JAN 00:00Z
    An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97
    cvelistv5