PT-2022-9220
CVE-2021-21966
·
تاريخ النشر
2022-02-16
·
تاريخ التحديث
2022-07-21
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Texas Instruments CC3200 SimpleLink Solution NWP version 2.9.0.0
Description
An information disclosure issue exists in the HTTP Server
/ping.html functionality. A specially-crafted HTTP request can lead to an uninitialized read. An attacker can send an HTTP request to trigger this issue.Recommendations
For Texas Instruments CC3200 SimpleLink Solution NWP version 2.9.0.0, consider disabling access to the
/ping.html endpoint until a patch is available. Restricting access to this functionality can help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾