A critical incorrect calculation vulnerability in RTI Connext Professional core libraries allows unauthenticated attackers to cause a denial of service through system instability.

The vulnerability involves an incorrect calculation within the Core Libraries that can be triggered by an unauthenticated remote attacker, resulting in high availability impact on the target system.

Successful exploitation of this flaw can lead to significant service degradation or total system failure, as indicated by the CVSS 8.7 score. This presents a high risk to operational continuity, particularly in industrial or real time environments where Connext Professional is deployed. The vulnerability is considered automatable, meaning it can be exploited at scale without requiring user interaction.

Immediate Action: Upgrade to RTI Connext Professional version 7.7.0.1 or 7.3.1.6 to resolve the underlying calculation error.

Proactive Monitoring: Monitor network traffic for unusual patterns directed at Connext services and review system logs for unexpected crashes or service restarts.

Compensating Controls: Implement network segmentation to restrict access to the Connext communication ports, ensuring that only trusted entities can interact with the affected middleware.

Public Exploit Available: No

Given the high CVSS score and the potential for remote, unauthenticated exploitation, organizations using RTI Connext Professional must prioritize this update. Evaluate the impact on your specific production environment and schedule the required version upgrade as soon as feasible to prevent potential denial of service attacks.