CVE-2021-22677
Quick assessment
Affected
n/a SimpleLink Wi-Fi, MSP432, CC13XX, CC26XX, CC32XX, CC3100
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Texas Instruments SimpleLink是美国德州仪器（Texas Instruments）公司的一个应用程序。提供了最广泛的差异化有线和无线Arm®MCU系列产品。 SimpleLink Wi-Fi, MSP432, CC13XX, CC26XX, CC32XX, CC3100 存在输入验证错误漏洞，该漏洞源于当试图连接到WIFI网络时，主机MCU的api中存在整数溢出，可能导致拒绝服务条件或代码执行等问题。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2021-22677
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
An integer overflow exists in the APIs of the host MCU while trying to connect to a WIFI network may lead to issues such as a denial-of-service condition or code execution on the SimpleLink Wi-Fi (MSP432E4 SDK: v4.20.00.12 and prior, CC32XX SDK v4.30.00.06 and prior, CC13X0 SDK versions prior to v4.10.03, CC13X2 and CC26XX SDK versions prior to v4.40.00, CC3200 SDK v1.5.0 and prior, CC3100 SDK v1.3.0 and prior).
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
整数溢出或超界折返
Source: CVE Program / CVE List V5
Vulnerability Title
Texas Instruments SimpleLink 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Texas Instruments SimpleLink是美国德州仪器（Texas Instruments）公司的一个应用程序。提供了最广泛的差异化有线和无线Arm®MCU系列产品。 SimpleLink Wi-Fi, MSP432, CC13XX, CC26XX, CC32XX, CC3100 存在输入验证错误漏洞，该漏洞源于当试图连接到WIFI网络时，主机MCU的api中存在整数溢出，可能导致拒绝服务条件或代码执行等问题。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | SimpleLink Wi-Fi, MSP432, CC13XX, CC26XX, CC32XX, CC3100 | MSP432E4 SDK: v4.20.00.12 and prior, CC32XX SDK v4.30.00.06 and prior, CC13X0 SDK versions prior to v4.10.03, CC13X2 and CC26XX SDK versions prior to v4.40.00, CC3200 SDK v1.5.0 and prior, CC3100 SDK v1.3.0 and prior | - |
|
II. Public POCs for CVE-2021-22677
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-22677
请登录查看更多情报信息。
Vendor Advisories for CVE-2021-22677 (1)
Same Patch Batch · n/a · 2021-05-07 · 42 CVEs total
| CVE-2021-27570 | Emote Remote Mouse 访问控制错误漏洞 | |
| CVE-2021-26123 | LivingLogic XIST4C 跨站脚本漏洞 | |
| CVE-2021-21984 | VMware vRealize Business for Cloud 命令注入漏洞 | |
| CVE-2020-14009 | Proofpoint Enterprise Protection 安全漏洞 | |
| CVE-2021-3502 | avahi 安全漏洞 | |
| CVE-2021-22675 | Texas Instruments SimpleLink 输入验证错误漏洞 | |
| CVE-2021-22679 | Texas Instruments SimpleLink 输入验证错误漏洞 | |
| CVE-2021-22671 | Texas Instruments SimpleLink 输入验证错误漏洞 | |
| CVE-2021-22673 | Texas Instruments SimpleLink 缓冲区错误漏洞 | |
| CVE-2021-27437 | Advantech WISE-PaaS/RMM 信任管理问题漏洞 | |
| CVE-2021-27569 | Emote Remote Mouse 安全漏洞 | |
| CVE-2021-26122 | LivingLogic XIST4C 跨站脚本漏洞 | |
| CVE-2021-27571 | Emote Remote Mouse 访问控制错误漏洞 | |
| CVE-2021-27572 | Emote Remote Mouse 安全漏洞 | |
| CVE-2021-27573 | Emote Remote Mouse 安全漏洞 | |
| CVE-2021-27574 | Emote Remote Mouse 安全漏洞 | |
| CVE-2021-32470 | Pixel＆Tonic Craft CMS 跨站脚本漏洞 | |
| CVE-2021-31756 | Tenda AC11 缓冲区错误漏洞 | |
| CVE-2021-31758 | Tenda AC11 缓冲区错误漏洞 | |
| CVE-2021-31755 | Tenda AC11 缓冲区错误漏洞 |
Showing top 20 of 42 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2021-22677
No comments yet