Vulnerabilities > CVE-2017-7243 - NULL Pointer Dereference vulnerability in Eclipse Tinydtls 0.8.2

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
network
low complexity
eclipse
CWE-476

Summary

Eclipse tinydtls 0.8.2 for Eclipse IoT allows remote attackers to cause a denial of service (DTLS peer crash) by sending a "Change cipher spec" packet without pre-handshake.

Vulnerable Configurations

Part Description Count
Application
Eclipse
1

Common Weakness Enumeration (CWE)