CVE-2021-38429

Published: May 5, 2022Modified: Jun 17, 2026

9.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Exploitability: 3.9 / Impact: 5.2

Source: NVD

Description

OCI OpenDDS versions prior to 3.18.1 are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic, which may result in a denial-of-service condition and information exposure.

Affected (1)

Products: Objectcomputing: Opendds

Objectcomputing

1 product

Opendds

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Objectcomputing Opendds	Before 3.18.1

Related CWEs

CWE-406

Insufficient Control of Network Message Volume (Network Amplification)

The product does not sufficiently monitor or control transmitted network traffic volume, so that an actor can cause the product to transmit more traffic than should be allowed for that actor.

References (4)

https://opendds.org/

Source: ics-cert@hq.dhs.gov

Product

https://www.cisa.gov/uscert/ics/advisories/icsa-21-315-02

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://opendds.org/

Source: af854a3a-2127-422b-91ae-364da2661108

Product

https://www.cisa.gov/uscert/ics/advisories/icsa-21-315-02

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.