Description
RTI Connext Professional versions 4.1 to 6.1.0, and Connext Micro versions 2.4 and later are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic. This may result in a denial-of-service condition and information exposure.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| RTI | Connext Professional | 4.1 – < 6.1.0 | 6.1.0 |
| RTI | Connext Micro | 4.0.0 – < 4.0.*, 3.0.0 – < 3.0.*, 2.4.0 – < 2.4.* | 4.0.* |
Advisories 1
- ICSA-21-315-02 Multiple Data Distribution Service (DDS) Implementations (Update A) CISA ICS & IT advisories · Feb 1, 2022