Priority MEDIUM 49
In gnss service, there is a possible escalation of privilege due to improper certificate validation.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00285 · Published 2024-07-01 · No fix listed CWE-295
Priority MEDIUM 48
In gnss service, there is a possible out of bounds write due to improper input validation.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00217 · Published 2024-07-01 · No fix listed CWE-787
Priority MEDIUM 43
A heap-based buffer overflow in cosa_dhcpv4_dml.c in the RDK RDKB-20181217-1 CcspPandM module may allow attackers with login credentials to achieve remote code execution by crafting a long buffer in the "Comment" field o…
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02396 · Published 2019-06-20 · No fix listed CWE-787
Priority MEDIUM 42
A heap-based buffer over-read in Service_SetParamStringValue in cosa_x_cisco_com_ddns_dml.c of the RDK RDKB-20181217-1 CcspPandM module may allow attackers with login credentials to achieve information disclosure and cod…
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01755 · Published 2019-06-20 · No fix listed CWE-125
Priority LOW 39
In wlan, there is a possible denial of service due to incorrect error handling.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00306 · Published 2024-09-02 · No fix listed CWE-703
Priority LOW 39
In wlan firmware, there is a possible out of bounds write due to improper input validation.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00178 · Published 2024-04-01 · No fix listed CWE-787
Priority LOW 37
In da, there is a possible out of bounds write due to a missing bounds check.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00089 · Published 2024-11-04 · No fix listed CWE-787
Priority LOW 37
In flashc, there is a possible out of bounds write due to an uncaught exception.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.0009 · Published 2024-04-01 · No fix listed CWE-787
Priority LOW 36
A shell injection issue in cosa_wifi_apis.c in the RDK RDKB-20181217-1 CcspWifiAgent module allows attackers with login credentials to execute arbitrary shell commands under the CcspWifiSsp process (running as root) if t…
CVSS 3.0HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.01562 · Published 2019-06-20 · No fix listed CWE-78
Priority LOW 31
In DA, there is a possible out of bounds write due to a missing bounds check.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00121 · Published 2025-08-04 · No fix listed CWE-787
Priority LOW 31
In DA, there is a possible out of bounds write due to a missing bounds check.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00124 · Published 2025-04-07 · No fix listed CWE-787
Priority LOW 31
In da, there is a possible out of bounds write due to a missing bounds check.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00109 · Published 2025-03-03 · No fix listed CWE-787
Priority LOW 31
In gnss, there is a possible escalation of privilege due to a missing bounds check.
CVSS 3.1MEDIUM 6.6· Network · High privileges · No interaction · EPSS 0.00269 · Published 2024-04-01 · No fix listed CWE-787
Priority LOW 31
In da, there is a possible out of bounds write due to a missing bounds check.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00223 · Published 2024-02-05 · No fix listed CWE-787
Priority LOW 31
Incorrect access control in actionHandlerUtility.php in the RDK RDKB-20181217-1 WebUI module allows a logged in user to control DDNS, QoS, RIP, and other privileged configurations (intended only for the network operator)…
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0091 · Published 2019-06-20 · No fix listed CWE-862
Priority LOW 30
In gnss service, there is a possible out of bounds write due to an incorrect bounds check.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00086 · Published 2025-11-04 · No fix listed CWE-121
Priority LOW 30
In gnss service, there is a possible out of bounds write due to an incorrect bounds check.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00086 · Published 2025-11-04 · No fix listed CWE-121
Priority LOW 30
In preloader, there is a possible escalation of privilege due to an insecure default value.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00078 · Published 2025-11-04 · No fix listed CWE-287
Priority LOW 30
In V6 DA, there is a possible out of bounds write due to a missing bounds check.
CVSS 3.1MEDIUM 6.6· Physical · No auth · User interaction · EPSS 0.00102 · Published 2025-02-03 · No fix listed CWE-787
Priority LOW 30
In V6 DA, there is a possible out of bounds write due to a missing bounds check.
CVSS 3.1MEDIUM 6.6· Physical · No auth · User interaction · EPSS 0.00109 · Published 2025-01-06 · No fix listed CWE-787
Priority LOW 30
In V6 DA, there is a possible out of bounds write due to a missing bounds check.
CVSS 3.1MEDIUM 6.6· Physical · No auth · User interaction · EPSS 0.00109 · Published 2025-01-06 · No fix listed CWE-787
Priority LOW 30
In V6 DA, there is a possible out of bounds write due to a missing bounds check.
CVSS 3.1MEDIUM 6.6· Physical · No auth · User interaction · EPSS 0.00109 · Published 2025-01-06 · No fix listed CWE-787
Priority LOW 30
In preloader, there is a possible escalation of privilege due to an insecure default value.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00091 · Published 2024-05-06 · No fix listed CWE-20
Priority LOW 30
In flashc, there is a possible out of bounds write due to lack of valudation.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00104 · Published 2024-03-04 · No fix listed CWE-787
Priority LOW 30
In lk, there is a possible escalation of privilege due to a missing bounds check.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00123 · Published 2024-03-04 · No fix listed CWE-125
Load more