CVE-2021-20988 HIGH

CVE-2021-20988: Hilscher rcX RTOS: Wrong handling of the UDP checksum

Vendor Hilscher
Product rcX RTOS
Weakness CWE-119
Published May 13, 2021
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

8.6/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

What the vulnerability does

01Description

In Hilscher rcX RTOS versions prios to V2.1.14.1 the actual UDP packet length is not verified against the length indicated by the packet. This may lead to a denial of service of the affected device.

Key dates

02Disclosure timeline

May 13, 2021 CVE published
September 16, 2024 Record updated