CVE-2021-43547: TwinOaks Computing CoreDX DDS versions prior to 5.9.1 are susceptible to exploitation when an attacker sends a
CVE-2021-43547 is a high-severity flaw (CVSS 7.5) affecting coredx dds. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
TwinOaks Computing CoreDX DDS versions prior to 5.9.1 are susceptible to exploitation when an attacker sends a specially crafted packet to flood target devices with unwanted traffic. This may result in a denial-of-service condition and information exposure.
Why this priority
- High severity
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.5 (High) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 2.5% (top 15%) |
| CISA exploited list | No |
| Weakness | CWE-406 |
| Published | 2022-05-05 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2021-43547?
coredx dds: upgrade to 5.9.1. Exact commands for each OS are on this page.
Is CVE-2021-43547 being exploited?
CVE-2021-43547 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2021-43547 affect?
CVE-2021-43547 affects coredx dds. Severity is high (CVSS 7.5). TwinOaks Computing CoreDX DDS versions prior to 5.9.1 are susceptible to exploitation when an attacker sends a specially crafted packet to flood target devices with unwanted traffic. This may result in a denial-of-service condition and info
How urgent is CVE-2021-43547?
Priority 52/100. High severity; Remotely exploitable, no login, no user action