CVE-2021-21966: Ti CC3100 Firmware

Medium severity, CVSS 5.3. EPSS: 1.4% chance of exploitation in the next 30 days.

An information disclosure vulnerability exists in the HTTP Server /ping.html functionality of Texas Instruments CC3200 SimpleLink Solution NWP 2.9.0.0. A specially-crafted HTTP request can lead to an uninitialized read. An attacker can send an HTTP request to trigger this vulnerability.

Affected products

• Ti CC3100 Firmware: before 1.0.1.15-2.15.0.1 (fixed in 1.0.1.15-2.15.0.1)
• Ti CC3200 Firmware: before 1.0.1.15-2.15.0.1 (fixed in 1.0.1.15-2.15.0.1)
• Ti Simplelink CC32XX Software Development Kit: before 5.30.00.08 (fixed in 5.30.00.08)

Published 2022-02-16. Last modified 2026-06-17.