Connext Professional vulnerability

What happened

Out-of-bounds Read, Out-of-bounds Write vulnerability in RTI Connext Professional (Recording Service) allows Overflow Buffers, Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.7, from 6.1.0 before 6.1.2.23, from 6.0.0 before 6.0.1.42.

Affected versions

Connext Professional: 7.4.0 through before 7.5.0 (custom); 7.0.0 through before 7.3.0.7 (custom); 6.1.0 through before 6.1.2.23 (custom); 6.0.0 through before 6.0.1.42 (custom) Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

• Apply vendor-provided updates or mitigations.
• Review affected product exposure and access logs.