CVE-2021-21966 - Vulnerability Details

Vendors	Products
Ti	Cc3100 Cc3100 Firmware Cc3120 Cc3130 Cc3135 Cc3200 Cc3200 Firmware Cc3220r Cc3220s Cc3220sf Cc3230s Cc3230sf Cc3235s Cc3235sf Simplelink Cc32xx Software Development Kit

Link	Providers
https://talosintelligence.com/vulnerability_reports/TALOS-2021-1393
https://www.ti.com/lit/an/swra740/swra740.pdf?ts=1645536893264&

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "Texas Instruments", "vendor": "n/a", "versions": [{"status": "affected", "version": "Texas Instruments CC3200 SimpleLink Solution NWP 2.9.0.0,Sealevel Systems, Inc. SeaConnect 370W v1.3.34"}]}], "descriptions": [{"lang": "en", "value": "An information disclosure vulnerability exists in the HTTP Server /ping.html functionality of Texas Instruments CC3200 SimpleLink Solution NWP 2.9.0.0. A specially-crafted HTTP request can lead to an uninitialized read. An attacker can send an HTTP request to trigger this vulnerability."}], "metrics": [{"cvssV3_0": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.0"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-457", "description": "CWE-457: Use of Uninitialized Variable", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2022-02-16T16:38:32", "orgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b", "shortName": "talos"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2021-1393"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "talos-cna@cisco.com", "ID": "CVE-2021-21966", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Texas Instruments", "version": {"version_data": [{"version_value": "Texas Instruments CC3200 SimpleLink Solution NWP 2.9.0.0,Sealevel Systems, Inc. SeaConnect 370W v1.3.34"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "An information disclosure vulnerability exists in the HTTP Server /ping.html functionality of Texas Instruments CC3200 SimpleLink Solution NWP 2.9.0.0. A specially-crafted HTTP request can lead to an uninitialized read. An attacker can send an HTTP request to trigger this vulnerability."}]}, "impact": {"cvss": {"baseScore": 5.3, "baseSeverity": "Medium", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.0"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-457: Use of Uninitialized Variable"}]}]}, "references": {"reference_data": [{"name": "https://talosintelligence.com/vulnerability_reports/TALOS-2021-1393", "refsource": "MISC", "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2021-1393"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T18:30:23.660Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2021-1393"}]}]}, "cveMetadata": {"assignerOrgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b", "assignerShortName": "talos", "cveId": "CVE-2021-21966", "datePublished": "2022-02-16T16:38:32", "dateReserved": "2021-01-04T00:00:00", "dateUpdated": "2024-08-03T18:30:23.660Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : Texas Instruments (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : Texas Instruments CC3200 SimpleLink Solution NWP 2.9.0.0,Sealevel Systems, Inc. SeaConnect 370W v1.3.34 (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : An information disclosure vulnerability exists in the HTTP Server /ping.html functionality of Texas Instruments CC3200 SimpleLink Solution NWP 2.9.0.0. A specially-crafted HTTP request can lead to an uninitialized read. An attacker can send an HTTP request to trigger this vulnerability. (string)

}

]

metrics : [ »

0 : { »

cvssV3_0 : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 5.3 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N (string)

version : 3.0 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-457 (string)

description : CWE-457: Use of Uninitialized Variable (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2022-02-16T16:38:32 (string)

orgId : b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b (string)

shortName : talos (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://talosintelligence.com/vulnerability_reports/TALOS-2021-1393 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : talos-cna@cisco.com (string)

ID : CVE-2021-21966 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : Texas Instruments (string)

version : { »

version_data : [ »

0 : { »

version_value : Texas Instruments CC3200 SimpleLink Solution NWP 2.9.0.0,Sealevel Systems, Inc. SeaConnect 370W v1.3.34 (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : An information disclosure vulnerability exists in the HTTP Server /ping.html functionality of Texas Instruments CC3200 SimpleLink Solution NWP 2.9.0.0. A specially-crafted HTTP request can lead to an uninitialized read. An attacker can send an HTTP request to trigger this vulnerability. (string)

}

]

}

impact : { »

cvss : { »

baseScore : 5.3 (number)

baseSeverity : Medium (string)

vectorString : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N (string)

version : 3.0 (string)

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : CWE-457: Use of Uninitialized Variable (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://talosintelligence.com/vulnerability_reports/TALOS-2021-1393 (string)

refsource : MISC (string)

url : https://talosintelligence.com/vulnerability_reports/TALOS-2021-1393 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T18:30:23.660Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://talosintelligence.com/vulnerability_reports/TALOS-2021-1393 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b (string)

assignerShortName : talos (string)

cveId : CVE-2021-21966 (string)

datePublished : 2022-02-16T16:38:32 (string)

dateReserved : 2021-01-04T00:00:00 (string)

dateUpdated : 2024-08-03T18:30:23.660Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ti:simplelink_cc32xx_software_development_kit:*:*:*:*:*:*:*:*", "matchCriteriaId": "579C3D60-5AA8-41AB-B7C1-340A300CAE39", "versionEndExcluding": "5.30.00.08", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:ti:cc3120:-:*:*:*:*:*:*:*", "matchCriteriaId": "253510AE-F0BE-45A3-B3C5-0B7F8074317A", "vulnerable": false}, {"criteria": "cpe:2.3:h:ti:cc3130:-:*:*:*:*:*:*:*", "matchCriteriaId": "0513D674-B4DF-4BD5-83C6-380B54316B29", "vulnerable": false}, {"criteria": "cpe:2.3:h:ti:cc3135:-:*:*:*:*:*:*:*", "matchCriteriaId": "21FD4E05-1521-4F3E-ACEC-FE14E92820DE", "vulnerable": false}, {"criteria": "cpe:2.3:h:ti:cc3220r:-:*:*:*:*:*:*:*", "matchCriteriaId": "D436F6E3-B044-457E-B67D-9C76105F0847", "vulnerable": false}, {"criteria": "cpe:2.3:h:ti:cc3220s:-:*:*:*:*:*:*:*", "matchCriteriaId": "EE6E103B-F34A-477C-907D-B4EAE295D90E", "vulnerable": false}, {"criteria": "cpe:2.3:h:ti:cc3220sf:-:*:*:*:*:*:*:*", "matchCriteriaId": "71ABA01C-4CB1-4DD5-9263-79A58BED3A9B", "vulnerable": false}, {"criteria": "cpe:2.3:h:ti:cc3230s:-:*:*:*:*:*:*:*", "matchCriteriaId": "E34FD25E-D5C2-40F0-81E2-A8A102934E8C", "vulnerable": false}, {"criteria": "cpe:2.3:h:ti:cc3230sf:-:*:*:*:*:*:*:*", "matchCriteriaId": "3408EEBE-25EC-4CEA-8E96-DCFF7C66B3F6", "vulnerable": false}, {"criteria": "cpe:2.3:h:ti:cc3235s:-:*:*:*:*:*:*:*", "matchCriteriaId": "370E65A3-17A4-4E05-BB4A-6C09BB5249CA", "vulnerable": false}, {"criteria": "cpe:2.3:h:ti:cc3235sf:-:*:*:*:*:*:*:*", "matchCriteriaId": "B06F9E6A-690D-4E95-ADD4-927995EE5523", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:ti:cc3100_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "674D8056-EDA3-43F5-8859-08FBF3AED523", "versionEndExcluding": "1.0.1.15-2.15.0.1", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:ti:cc3100:-:*:*:*:*:*:*:*", "matchCriteriaId": "CFD28F25-EC13-4994-B040-D2F5F1D1C1A2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:ti:cc3200_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8374620E-9070-4105-B6DB-A974085345A9", "versionEndExcluding": "1.0.1.15-2.15.0.1", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:ti:cc3200:-:*:*:*:*:*:*:*", "matchCriteriaId": "E1738237-A64A-40A3-B201-7E0005CCA3A2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "An information disclosure vulnerability exists in the HTTP Server /ping.html functionality of Texas Instruments CC3200 SimpleLink Solution NWP 2.9.0.0. A specially-crafted HTTP request can lead to an uninitialized read. An attacker can send an HTTP request to trigger this vulnerability."}, {"lang": "es", "value": "Se presenta una vulnerabilidad de divulgaci\u00f3n de informaci\u00f3n en la funcionalidad HTTP Server /ping.html de Texas Instruments CC3200 SimpleLink Solution NWP versi\u00f3n 2.9.0.0. Una petici\u00f3n HTTP especialmente dise\u00f1ada puede conllevar a una lectura no inicializada. Un atacante puede enviar una petici\u00f3n HTTP para desencadenar esta vulnerabilidad"}], "id": "CVE-2021-21966", "lastModified": "2024-11-21T05:49:20.123", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "talos-cna@cisco.com", "type": "Secondary"}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-02-16T17:15:10.353", "references": [{"source": "talos-cna@cisco.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2021-1393"}, {"source": "nvd@nist.gov", "tags": ["Vendor Advisory"], "url": "https://www.ti.com/lit/an/swra740/swra740.pdf?ts=1645536893264&"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2021-1393"}], "sourceIdentifier": "talos-cna@cisco.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-457"}], "source": "talos-cna@cisco.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-908"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:ti:simplelink_cc32xx_software_development_kit:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 579C3D60-5AA8-41AB-B7C1-340A300CAE39 (string)

versionEndExcluding : 5.30.00.08 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:ti:cc3120:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 253510AE-F0BE-45A3-B3C5-0B7F8074317A (string)

vulnerable : false (boolean)

}

1 : { »

criteria : cpe:2.3:h:ti:cc3130:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 0513D674-B4DF-4BD5-83C6-380B54316B29 (string)

vulnerable : false (boolean)

}

2 : { »

criteria : cpe:2.3:h:ti:cc3135:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 21FD4E05-1521-4F3E-ACEC-FE14E92820DE (string)

vulnerable : false (boolean)

}

3 : { »

criteria : cpe:2.3:h:ti:cc3220r:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D436F6E3-B044-457E-B67D-9C76105F0847 (string)

vulnerable : false (boolean)

}

4 : { »

criteria : cpe:2.3:h:ti:cc3220s:-:*:*:*:*:*:*:* (string)

matchCriteriaId : EE6E103B-F34A-477C-907D-B4EAE295D90E (string)

vulnerable : false (boolean)

}

5 : { »

criteria : cpe:2.3:h:ti:cc3220sf:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 71ABA01C-4CB1-4DD5-9263-79A58BED3A9B (string)

vulnerable : false (boolean)

}

6 : { »

criteria : cpe:2.3:h:ti:cc3230s:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E34FD25E-D5C2-40F0-81E2-A8A102934E8C (string)

vulnerable : false (boolean)

}

7 : { »

criteria : cpe:2.3:h:ti:cc3230sf:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3408EEBE-25EC-4CEA-8E96-DCFF7C66B3F6 (string)

vulnerable : false (boolean)

}

8 : { »

criteria : cpe:2.3:h:ti:cc3235s:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 370E65A3-17A4-4E05-BB4A-6C09BB5249CA (string)

vulnerable : false (boolean)

}

9 : { »

criteria : cpe:2.3:h:ti:cc3235sf:-:*:*:*:*:*:*:* (string)

matchCriteriaId : B06F9E6A-690D-4E95-ADD4-927995EE5523 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

1 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:ti:cc3100_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 674D8056-EDA3-43F5-8859-08FBF3AED523 (string)

versionEndExcluding : 1.0.1.15-2.15.0.1 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:ti:cc3100:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CFD28F25-EC13-4994-B040-D2F5F1D1C1A2 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

2 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:ti:cc3200_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 8374620E-9070-4105-B6DB-A974085345A9 (string)

versionEndExcluding : 1.0.1.15-2.15.0.1 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:ti:cc3200:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E1738237-A64A-40A3-B201-7E0005CCA3A2 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : An information disclosure vulnerability exists in the HTTP Server /ping.html functionality of Texas Instruments CC3200 SimpleLink Solution NWP 2.9.0.0. A specially-crafted HTTP request can lead to an uninitialized read. An attacker can send an HTTP request to trigger this vulnerability. (string)

}

1 : { »

lang : es (string)

value : Se presenta una vulnerabilidad de divulgación de información en la funcionalidad HTTP Server /ping.html de Texas Instruments CC3200 SimpleLink Solution NWP versión 2.9.0.0. Una petición HTTP especialmente diseñada puede conllevar a una lectura no inicializada. Un atacante puede enviar una petición HTTP para desencadenar esta vulnerabilidad (string)

}

]

id : CVE-2021-21966 (string)

lastModified : 2024-11-21T05:49:20.123 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : NONE (string)

baseScore : 5 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : NONE (string)

vectorString : AV:N/AC:L/Au:N/C:P/I:N/A:N (string)

version : 2.0 (string)

}

exploitabilityScore : 10 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 5.3 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N (string)

version : 3.0 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 1.4 (number)

source : talos-cna@cisco.com (string)

type : Secondary (string)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 5.3 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 1.4 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2022-02-16T17:15:10.353 (string)

references : [ »

0 : { »

source : talos-cna@cisco.com (string)

tags : [ »

0 : Exploit (string)

1 : Third Party Advisory (string)

]

url : https://talosintelligence.com/vulnerability_reports/TALOS-2021-1393 (string)

}

1 : { »

source : nvd@nist.gov (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.ti.com/lit/an/swra740/swra740.pdf?ts=1645536893264& (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Exploit (string)

1 : Third Party Advisory (string)

]

url : https://talosintelligence.com/vulnerability_reports/TALOS-2021-1393 (string)

}

]

sourceIdentifier : talos-cna@cisco.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-457 (string)

}

]

source : talos-cna@cisco.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-908 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object