Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Rdkcentral Component: Rdkb Ccsppandm Clear all filters
TI-2019-04900 CVE-2019-6964 · GHSA-c8cf-c27r-3x38

A heap-based buffer over-read in Service_SetParamStringValue in…

Priority MEDIUM 42

A heap-based buffer over-read in Service_SetParamStringValue in cosa_x_cisco_com_ddns_dml.c of the RDK RDKB-20181217-1 CcspPandM module may allow attackers with login credentials to achieve information disclosure and cod…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01755 Published 2019-06-20 No fix listed CWE-125
TI-2019-04899 CVE-2019-6963 · GHSA-9f67-cgcg-c6vj

A heap-based buffer overflow in cosa_dhcpv4_dml.c in the RDK RDKB-20181217-1 CcspPandM…

Priority MEDIUM 43

A heap-based buffer overflow in cosa_dhcpv4_dml.c in the RDK RDKB-20181217-1 CcspPandM module may allow attackers with login credentials to achieve remote code execution by crafting a long buffer in the "Comment" field o…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02396 Published 2019-06-20 No fix listed CWE-787
TI-2019-04898 CVE-2019-6962 · GHSA-m4p4-hmvf-f9fj

A shell injection issue in cosa_wifi_apis.c in the RDK RDKB-20181217-1 CcspWifiAgent…

Priority LOW 36

A shell injection issue in cosa_wifi_apis.c in the RDK RDKB-20181217-1 CcspWifiAgent module allows attackers with login credentials to execute arbitrary shell commands under the CcspWifiSsp process (running as root) if t…

CVSS 3.0HIGH 7.5 Network Low privileges No interaction EPSS 0.01562 Published 2019-06-20 No fix listed CWE-78
TI-2019-04897 CVE-2019-6961 · GHSA-xm7h-r43h-8xg2

Incorrect access control in actionHandlerUtility.php in the RDK RDKB-20181217-1 WebUI…

Priority LOW 31

Incorrect access control in actionHandlerUtility.php in the RDK RDKB-20181217-1 WebUI module allows a logged in user to control DDNS, QoS, RIP, and other privileged configurations (intended only for the network operator)…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0091 Published 2019-06-20 No fix listed CWE-862