Known Vulnerabilities for products from Rdkcentral
Listed below are 4 of the newest known vulnerabilities associated with the vendor "Rdkcentral".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2019-6964 | A heap-based buffer over-read in Service_SetParamStringValue in cosa_x_cisco_com_ddns_dml.c of the RDK RDKB-20181217-1 CcspPa... | 8.8 - HIGH | 2019-06-20 | 2019-06-28 |
| CVE-2019-6963 | A heap-based buffer overflow in cosa_dhcpv4_dml.c in the RDK RDKB-20181217-1 CcspPandM module may allow attackers with login ... | 8.8 - HIGH | 2019-06-20 | 2020-08-24 |
| CVE-2019-6962 | A shell injection issue in cosa_wifi_apis.c in the RDK RDKB-20181217-1 CcspWifiAgent module allows attackers with login crede... | 7.5 - HIGH | 2019-06-20 | 2020-08-24 |
| CVE-2019-6961 | Incorrect access control in actionHandlerUtility.php in the RDK RDKB-20181217-1 WebUI module allows a logged in user to contr... | 6.5 - MEDIUM | 2019-06-20 | 2020-08-24 |