CVE-2021-38487

RTI Connext Professional versions 4.1 to 6.1.0, and Connext Micro versions 2.4 and later are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic. This may result in a denial-of-service condition and information exposure.

• CWE-406
• CWE-923

• https://support.rti.com/s/login/?ec=302&startURL=%2Fs%2FPermissions Required, Vendor Advisory
• https://www.cisa.gov/uscert/ics/advisories/icsa-21-315-02Third Party Advisory, US Government Resource
• https://www.rti.com/vulnerabilities/#cve-2021-38487
• https://support.rti.com/s/login/?ec=302&startURL=%2Fs%2FPermissions Required, Vendor Advisory
• https://www.cisa.gov/uscert/ics/advisories/icsa-21-315-02Third Party Advisory, US Government Resource

Published

May 5, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-38481The scheduler service running on a specific TCP port enables…9.8
• CVE-2021-38482InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.…4.8
• CVE-2021-38483The affected product is vulnerable to misconfigured binaries…5.7
• CVE-2021-38484InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.…7.2
• CVE-2021-38485The affected product is vulnerable to improper input validat…8.8
• CVE-2021-38486InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.…8.5
• CVE-2021-38488Delta Electronics DIALink versions 1.2.4.0 and prior is vuln…4.8
• CVE-2021-38489HDD password plaintext is stored in a UEFI variable.8.2
• CVE-2021-3849An authentication bypass vulnerability was discovered in the…9.8
• CVE-2021-38490Altova MobileTogether Server before 7.3 SP1 allows XML expon…7.5
• CVE-2021-38491Mixed-content checks were unable to analyze opaque origins w…6.5
• CVE-2021-38492When delegating navigations to the operating system, Firefox…6.5