CVE-2021-41061: Riot-OS Riot

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In RIOT-OS 2021.01, nonce reuse in 802.15.4 encryption in the ieee820154_security component allows attackers to break encryption by triggering reboots.

Affected products

• Riot-OS Riot: version 2021.01 only

Published 2021-09-15. Last modified 2026-06-17.