CVE-2021-42146 - CVE House
Back to Database
Status published Unknown CVE-2021-42146

An issue was discovered in Contiki-NG tinyDTLS through master branch...

Vulnerability Description

An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers allow remote attackers to reuse the same epoch number within two times the TCP maximum segment lifetime, which is prohibited in RFC6347. This vulnerability allows remote attackers to obtain sensitive application (data of connected clients).

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-42146

Credits & Attribution

No credits recorded in the NVD database.

References

More from contiki-ng

View All →
CVE-2024-47181
Unaligned memory access in RPL option processing in Contiki-NG
High 7.5
CVE-2024-41126
Out-of-bounds read when decoding SNMP messages in Contiki-NG
High 8.4
CVE-2024-41125
Out-of-bounds read in SNMP when decoding a string in Contiki-NG
High 8.4
CVE-2023-50927
Insufficient boundary checks for DIO and DAO messages in RPL-Lite in Contiki-NG
High 8.6
CVE-2023-50926
Unvalidated DIO prefix info length in RPL-Lite in Contiki-NG
High 7.5

Affected Vendor

Affected Software

tinydtls
Vulnerable Versions:
2018-08-30

Timeline

Official Publish: January 24th, 2024
Last Modified: June 20th, 2025
Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.