CVE-2021-42146

2024-01-2400:00:00

mitre

www.cve.org

contiki-ng

cve-2021-42146

vulnerability

dtls servers

rfc6347

remote attackers

sensitive application data

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

42.3%

JSON

An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers allow remote attackers to reuse the same epoch number within two times the TCP maximum segment lifetime, which is prohibited in RFC6347. This vulnerability allows remote attackers to obtain sensitive application (data of connected clients).

References

seclists.org/fulldisclosure/2024/Jan/19