A missing authentication check for a critical function in RTI Connext Professional allows an attacker to forge the source of data. Because the system does not verify the origin of the data, messages can be sent that appear to originate from a legitimate source, potentially leading to data integrity violations and unauthorized actions within the distributed system.

The vulnerability affects RTI Connext Professional from version 7.4.0 up to but not including 7.7.0, from 7.0.0 up to but not including 7.3.1.3, from 6.1.0 up to but not including any 6.1.* release, from 6.0.0 up to but not including any 6.0.* release, and from 5.3.0 up to but not including any 5.3.* release.

The CVSS score of 6 indicates a medium severity. The EPSS score of less than 1% suggests a low probability of exploitation at the time of analysis, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is inferred to be remote network access to the RTI Connext Professional instance, as the missing authentication would be exploitable over the network.