CVE-2021-21966

MEDIUM

5.3

CVSS Score

Published: February 16, 2022 at 04:38 PM UTC

Updated: June 17, 2026 at 03:36 AM UTC

15 products affected across 1 vendorSimplelink CC32XX Software Development KitCC3100 FirmwareCC3200 Firmware

Using Texas Instruments by N/A?

Get instant alerts when new vulnerabilities affect Texas Instruments - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.3

Exploit prediction

EPSS 1%

Description

An information disclosure vulnerability exists in the HTTP Server /ping.html functionality of Texas Instruments CC3200 SimpleLink Solution NWP 2.9.0.0. A specially-crafted HTTP request can lead to an uninitialized read. An attacker can send an HTTP request to trigger this vulnerability.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

CC3100 Firmware · Ti

95%

v < 1.0.1.15-2.15.0.1

Affected range stops below 1.0.1.15-2.15.0.1, so it looks safe — our inference, not a vendor statement

ti-cc3100 (same device)

CC3200 Firmware · Ti

95%

v < 1.0.1.15-2.15.0.1

Affected range stops below 1.0.1.15-2.15.0.1, so it looks safe — our inference, not a vendor statement

ti-cc3200 (same device)

Simplelink CC32XX Software Development Kit · Ti

95%

v < 5.30.00.08

Affected range stops below 5.30.00.08, so it looks safe — our inference, not a vendor statement

ti-cc3120 (environment) · ti-cc3130 (environment) · ti-cc3135 (environment) · ti-cc3220r (environment) · ti-cc3220s (environment) · ti-cc3220sf (environment) · ti-cc3230s (environment) · ti-cc3230sf (environment) · ti-cc3235s (environment) · ti-cc3235sf (environment)

CC3200 · Ti

60%

Texas Instruments CC3200 SimpleLink Solution NWP 2.9.0.0,Sealevel Systems, Inc. SeaConnect 370W v1.3.34

Cc3100 · Tidevice

80%

All versions

Cc3120 · Tidevice

80%

All versions

Cc3130 · Tidevice

80%

All versions