PT-2021-14317
CVE-2021-20988
·
Published
2021-05-13
·
Updated
2021-09-09
Description by
CVSS 3.1
8.6
HighMetricsAV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
Hilscher rcX RTOS versions prior to V2.1.14.1
Description:
The issue arises from the lack of verification of the actual UDP packet length against the length indicated by the packet. This can lead to a denial of service of the affected device.
Recommendations:
For versions prior to V2.1.14.1, update to version V2.1.14.1 or later to resolve the issue. As a temporary workaround, consider restricting UDP packet handling to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾