CVE-2021-21966

Name of the Vulnerable Software and Affected Versions Texas Instruments CC3200 SimpleLink Solution NWP version 2.9.0.0

Description An information disclosure issue exists in the HTTP Server /ping.html functionality. A specially-crafted HTTP request can lead to an uninitialized read. An attacker can send an HTTP request to trigger this issue.

Recommendations For Texas Instruments CC3200 SimpleLink Solution NWP version 2.9.0.0, consider disabling access to the /ping.html endpoint until a patch is available. Restricting access to this functionality can help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.