CVE-2021-38447

Published: May 5, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

OCI OpenDDS versions prior to 3.18.1 are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic, which may result in a denial-of-service condition.

Affected (1)

Products: Objectcomputing: Opendds

Objectcomputing

1 product

Opendds

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Objectcomputing Opendds	Before 3.18.1

Related CWEs

CWE-405

Asymmetric Resource Consumption (Amplification)

The product does not properly control situations in which an adversary can cause the product to consume or produce excessive resources without requiring the adversary to invest equivalent work or otherwise prove authorization, i.e., the adversary's influence is "asymmetric."

References (4)

https://opendds.org/

Source: ics-cert@hq.dhs.gov

Product

https://www.cisa.gov/uscert/ics/advisories/icsa-21-315-02

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://opendds.org/

Source: af854a3a-2127-422b-91ae-364da2661108

Product

https://www.cisa.gov/uscert/ics/advisories/icsa-21-315-02

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.