This vulnerability (CWE-611) in RTI Connext Professional arises from improper restriction of XML External Entity references in serialized data processing across multiple services. It affects versions from 5.3.0 before 5.3.*, 6.0.0 before 6.0.*, 6.1.0 before 6.1.2.34, 7.1.0 before 7.3.1.1, and 7.4.0 before 7.7.0. The issue could allow attackers to exploit external entity references leading to data serialization external entities blowup, which may cause denial of service or data exposure. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, but with high impact on confidentiality and availability. There are no known exploits in the wild reported and no patch links provided in the data.

Successful exploitation could lead to high impact on confidentiality and availability due to XML External Entity processing flaws. Attackers may cause data leakage or denial of service conditions by leveraging serialized data external linking and entity blowup. The vulnerability is remotely exploitable without authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or fix links are provided in the available data. Users should monitor RTI's official advisories for updates and apply any official fixes once available. Until then, consider disabling or restricting XML external entity processing if feasible in the affected services.