Rdkcentral Rdkb Ccsppandm
4 CVEs affecting Rdkcentral Rdkb Ccsppandm. Latest disclosed: 2019-06-20. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-6964 | High | 8.8 | 2019-06-20 | A heap-based buffer over-read in Service_SetParamStringValue in cosa_x_cisco_com_ddns_dml.c of the RDK RDKB-20181217-1 CcspPandM module may allow attackers wit… |
CVE-2019-6963 | High | 8.8 | 2019-06-20 | A heap-based buffer overflow in cosa_dhcpv4_dml.c in the RDK RDKB-20181217-1 CcspPandM module may allow attackers with login credentials to achieve remote code… |
CVE-2019-6962 | High | 7.5 | 2019-06-20 | A shell injection issue in cosa_wifi_apis.c in the RDK RDKB-20181217-1 CcspWifiAgent module allows attackers with login credentials to execute arbitrary shell… |
CVE-2019-6961 | Medium | 6.5 | 2019-06-20 | Incorrect access control in actionHandlerUtility.php in the RDK RDKB-20181217-1 WebUI module allows a logged in user to control DDNS, QoS, RIP, and other privi… |