Priority MEDIUM 50
RTI Connext Professional versions 4.1 to 6.1.0, and Connext Micro versions 2.4 and later are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.03383 · Published 2022-05-05 · Fixed in 6.1.0 CWE-406
Priority MEDIUM 45
Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.
CVSS 4.0CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.002 · Published 2026-06-17 · Fixed in 7.7.0, 7.3.1.3 CWE-125
Priority MEDIUM 45
Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.
CVSS 4.0CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.00189 · Published 2026-06-17 · Fixed in 7.7.0, 7.3.1.3 CWE-122
Priority MEDIUM 45
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RTI Connext Professional (Queuing Service) allows SQL Injection.This issue affects Connext Professional: from 7.0.0 be…
CVSS 4.0CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00408 · Published 2024-12-13 · Fixed in 7.3.0, 6.1.2.17 CWE-89
Priority MEDIUM 45
RTI Connext DDS Professional and Connext DDS Secure Versions 4.2x to 6.1.0 not correctly calculate the size when allocating the buffer, which may result in a buffer overflow.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01445 · Published 2022-05-05 · No fix listed CWE-131
Priority MEDIUM 44
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Web Integration Service) allows Filter Failure through Buffer Overflow.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00251 · Published 2026-06-17 · Fixed in 7.7.0.1, 7.3.1.3 CWE-120
Priority MEDIUM 42
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Routing Service) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.4.0 be…
CVSS 4.0HIGH 8.3· Network · No auth · No interaction · EPSS 0.00288 · Published 2024-12-13 · Fixed in 7.5.0, 7.3.0.5 +2 CWE-120
Priority MEDIUM 42
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries, Routing Service) allows Overflow Variables and Tags.This issue affects Connext Professiona…
CVSS 4.0HIGH 8.3· Network · No auth · No interaction · EPSS 0.00339 · Published 2024-12-13 · Fixed in 7.3.0.5, 6.1.2.21 +2 CWE-120
Priority MEDIUM 42
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries, Queuing Service, Recording Service, Routing Service) allows Overflow Variables and Tags.Th…
CVSS 4.0HIGH 8.3· Network · No auth · No interaction · EPSS 0.00462 · Published 2024-12-13 · Fixed in 7.5.0, 7.3.0.5 +3 CWE-120
Priority MEDIUM 42
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Routing Service, Recording Service, Queuing Service, Observability Collector Service, Cloud Discovery Serv…
CVSS 4.0HIGH 8.3· Network · No auth · No interaction · EPSS 0.00314 · Published 2024-12-13 · Fixed in 7.3.0.5, 6.1.2.21 +2 CWE-120
Priority MEDIUM 41
Exposure of Private Personal Information to an Unauthorized Actor vulnerability in RTI Connext Professional (Core Libraries) allows Sniffing Network Traffic.
CVSS 4.0HIGH 8.3· Network · No auth · No interaction · EPSS 0.00229 · Published 2025-12-16 · Fixed in 7.7.0, 7.3.1 CWE-359
Priority LOW 38
Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Recording Service,Routing Service,Queueing Service,Cloud Discovery Service,Observability Collector) allows Serialized Data…
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00239 · Published 2026-04-01 · Fixed in 7.7.0, 7.3.1.1 +1 CWE-611
Priority LOW 38
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in RTI Connext Professional (System Designer) allows OS Command Injection.This issue affects Connext Professional:…
CVSS 4.0HIGH 8.6· Local · No auth · No interaction · EPSS 0.00634 · Published 2024-12-13 · Fixed in 7.3.0.2, 6.1.2.19 CWE-78
Priority LOW 37
Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Core Libraries) allows Serialized Data External Linking.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00205 · Published 2026-04-30 · Fixed in 7.7.0, 7.3.1.1 CWE-611
Priority LOW 36
Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation.
CVSS 4.0HIGH 8.3· Network · No auth · No interaction · EPSS 0.0037 · Published 2025-09-23 · Fixed in 7.6.0, 7.3.0.10 +2 CWE-822
Priority LOW 36
Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation.
CVSS 4.0HIGH 8.3· Network · No auth · No interaction · EPSS 0.00369 · Published 2025-09-23 · Fixed in 7.6.0, 7.3.0.9 CWE-822
Priority LOW 35
Out-of-bounds Read, Out-of-bounds Write vulnerability in RTI Connext Professional (Recording Service) allows Overflow Buffers, Overread Buffers.
CVSS 4.0HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.00253 · Published 2025-05-08 · Fixed in 7.5.0, 7.3.0.7 +2 CWE-125
Priority LOW 35
RTI Connext DDS Professional and Connext DDS Secure Versions 4.2x to 6.1.0 vulnerable to a stack-based buffer overflow, which may allow a local attacker to execute arbitrary code.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00581 · Published 2022-05-05 · No fix listed CWE-121
Priority LOW 35
RTI Connext DDS Professional and Connext DDS Secure Versions 4.2.x to 6.1.0 are vulnerable to a stack-based buffer overflow, which may allow a local attacker to execute arbitrary code.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00581 · Published 2022-05-05 · No fix listed CWE-121
Priority LOW 33
In RTI Connext Professional 5.3.1 through 6.1.0 before 6.1.1, a buffer overflow in XML parsing from Routing Service, Recording Service, Queuing Service, and Cloud Discovery Service allows attackers to execute code with t…
CVSS 3.1HIGH 7.3· Local · Low privileges · No interaction · EPSS 0.00183 · Published 2024-05-21 · No fix listed CWE-120
Priority LOW 32
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Heap-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in RTI Connext Professional (Security Plugins) allows Overflow Variables an…
CVSS 4.0MEDIUM 6.9· Local · Low privileges · No interaction · EPSS 0.00168 · Published 2024-12-13 · Fixed in 7.3.0.2, 6.1.2.17 CWE-120
Priority LOW 30
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.
CVSS 4.0MEDIUM 6.9· Local · Low privileges · No interaction · EPSS 0.00176 · Published 2025-05-08 · Fixed in 7.5.0, 7.3.0.7 +2 CWE-120
Priority LOW 30
Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.
CVSS 4.0MEDIUM 6.9· Local · Low privileges · No interaction · EPSS 0.00161 · Published 2025-05-08 · Fixed in 7.5.0, 7.3.0.7 +2 CWE-122
Priority LOW 30
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.0.0 bef…
CVSS 4.0MEDIUM 6.9· Local · Low privileges · No interaction · EPSS 0.00167 · Published 2024-12-13 · Fixed in 7.3.0.5, 6.1.2.21 +2 CWE-120
Priority LOW 29
Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Identity Spoofing.
CVSS 4.0MEDIUM 6.1· Network · Low privileges · No interaction · EPSS 0.00255 · Published 2026-06-17 · Fixed in 7.7.0, 7.3.1.6 CWE-306
Load more