5.3

CVE-2021-21966

Exploit
An information disclosure vulnerability exists in the HTTP Server /ping.html functionality of Texas Instruments CC3200 SimpleLink Solution NWP 2.9.0.0. A specially-crafted HTTP request can lead to an uninitialized read. An attacker can send an HTTP request to trigger this vulnerability.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ti ≫ Simplelink Cc32xx Software Development Kit Version < 5.30.00.08
   Ti ≫ Cc3120 Version -
   Ti ≫ Cc3130 Version -
   Ti ≫ Cc3135 Version -
   Ti ≫ Cc3220r Version -
   Ti ≫ Cc3220s Version -
   Ti ≫ Cc3220sf Version -
   Ti ≫ Cc3230s Version -
   Ti ≫ Cc3230sf Version -
   Ti ≫ Cc3235s Version -
   Ti ≫ Cc3235sf Version -
Ti ≫ Cc3100 Firmware Version < 1.0.1.15-2.15.0.1
   Ti ≫ Cc3100 Version -
Ti ≫ Cc3200 Firmware Version < 1.0.1.15-2.15.0.1
   Ti ≫ Cc3200 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.38% 0.689
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
Cisco Talos 5.3 3.9 1.4
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CWE-457 Use of Uninitialized Variable

The code uses a variable that has not been initialized, leading to unpredictable or unintended results.

CWE-908 Use of Uninitialized Resource

The product uses or accesses a resource that has not been initialized.

https://talosintelligence.com/vulnerability_reports/TALOS-2021-1393
Third Party Advisory
Exploit
https://www.ti.com/lit/an/swra740/swra740.pdf?ts=1645536893264&
Vendor Advisory