Is CVE-2021-22677 actively exploited?

No active exploitation of CVE-2021-22677 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2021-22677 be exploited remotely?

No. CVE-2021-22677 requires local access to exploit.

What is the CVSS score of CVE-2021-22677?

CVE-2021-22677 has a CVSS score of 7.8 (HIGH).

HOME VULNERABILITIESCVE-2021-22677

HIGH

CVE-2021-22677

CWE-190Published: May 7, 2021· Updated: Jun 17, 2026

7.8

CVSS v3.1

Official Description

An integer overflow exists in the APIs of the host MCU while trying to connect to a WIFI network may lead to issues such as a denial-of-service condition or code execution on the SimpleLink Wi-Fi (MSP432E4 SDK: v4.20.00.12 and prior, CC32XX SDK v4.30.00.06 and prior, CC13X0 SDK versions prior to v4.10.03, CC13X2 and CC26XX SDK versions prior to v4.40.00, CC3200 SDK v1.5.0 and prior, CC3100 SDK v1.3.0 and prior).

NVD Source

Technical Analysis

CVE-2021-22677 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.8.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges Req.Low

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Vendors & Products

ti7 product(s)

cc3100 software development kitcc3200 software development kitsimplelink cc13x0 software development kitsimplelink cc13x2 software development kitsimplelink cc26xx software development kitsimplelink cc32xx software development kitsimplelink msp432e4 software development kit

Source: NVD CPE · 7 total CPE entries