CVE-2021-43547 TwinOaks Computing CoreDX DDS Secure Network Amplification
Attackers can cause denial of service and information exposure in TwinOaks CoreDX DDS by sending crafted packets, affecting industrial control systems.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-43547?
CVE-2021-43547 is a high-severity denial of service vulnerability in TwinOaks Computing CoreDX DDS, published on 5 May 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
TwinOaks Computing CoreDX DDS versions prior to 5.9.1 are susceptible to exploitation when an attacker sends a specially crafted packet to flood target devices with unwanted traffic. This may result in a denial-of-service condition and information exposure.
Weakness: CWE-406
Which versions are affected by CVE-2021-43547?
It affects 1 product.
Products include Twinoakscomputing Coredx Dds.
How do I fix CVE-2021-43547?
No fix has been published for CVE-2021-43547 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2021-43547 being exploited?
There is no known exploitation of CVE-2021-43547 in the wild and no public exploit code.
Sources
Also known as GHSA-c6m8-cmm6-5qvg.