2 lines
4.2 KiB
JSON
2 lines
4.2 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","modules":["Queueing Service","Core Libraries","Persistence Service"],"packageName":"connext_professional","packageURL":"pkg:generic/connext_professional","product":"Connext Professional","vendor":"RTI","versions":[{"lessThan":"7.7.0","status":"affected","version":"7.4.0","versionType":"custom"},{"lessThan":"7.3.1.3","status":"affected","version":"7.0.0","versionType":"custom"},{"lessThan":"6.1.*","status":"affected","version":"6.1.0","versionType":"custom"}]}],"source":"3f572a00-62e2-4423-959a-7ea25eff1638"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:rti:connext_professional:*:*:*:*:*:*:*:*","matchCriteriaId":"B6B5FCCD-2C72-4980-B453-DF8E7356ACF2","versionEndExcluding":"7.7.0","versionStartIncluding":"6.1.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Out-of-bounds Write vulnerability in RTI Connext Professional (Queueing Service,Core Libraries,Persistence Service) allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.3, from 6.1.0 before 6.1.*."},{"lang":"es","value":"Escritura fuera de límites, Escritura fuera de límites, Escritura fuera de límites vulnerabilidad en RTI Connext Professional (Servicio de Colas, Bibliotecas Principales, Servicio de Persistencia) permite Desbordamiento de Búferes, Desbordamiento de Búferes, Desbordamiento de Búferes. Este problema afecta a Connext Professional: desde 7.4.0 anterior a 7.7.0, desde 7.0.0 anterior a 7.3.1.3, desde 6.1.0 anterior a 6.1.*."}],"id":"CVE-2026-2674","lastModified":"2026-10-26T11:10:00.157","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.2,"source":"nvd@nist.gov","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":4.8,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"3f572a00-62e2-4423-959a-7ea25eff1638","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-2674","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-06-17T17:57:40.284382Z","version":"2.0.3"}}]},"published":"2026-06-17T18:17:42.387","references":[{"source":"3f572a00-62e2-4423-959a-7ea25eff1638","tags":["Vendor Advisory"],"url":"https://www.rti.com/vulnerabilities/#cve-2026-2674"}],"sourceIdentifier":"3f572a00-62e2-4423-959a-7ea25eff1638","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-787"}],"source":"3f572a00-62e2-4423-959a-7ea25eff1638","type":"Secondary"}]}
|