Skip to main content

Use of Uninitialized Variable

CVE-2021-21966

Medium
5.3/10

Summary

An information disclosure vulnerability exists in the HTTP Server /ping.html functionality of Texas Instruments CC3200 SimpleLink Solution NWP 2.9.0.0. A specially-crafted HTTP request can lead to an uninitialized read. An attacker can send an HTTP request to trigger this vulnerability.

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • NONE
  • LOW
  • NONE

CWE-457 - Use of Uninitialized Variable

The code uses a variable that has not been initialized, leading to unpredictable or unintended results.

References

Advisory Timeline

  • Published