CVE-2019-6963

2019-06-2014:15:11

Google

osv.dev

8.2 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.8%

JSON

A heap-based buffer overflow in cosa_dhcpv4_dml.c in the RDK RDKB-20181217-1 CcspPandM module may allow attackers with login credentials to achieve remote code execution by crafting a long buffer in the “Comment” field of an IP reservation form in the admin panel. This is related to the CcspCommonLibrary module.

CPENameOperatorVersion
rdkb-ccsppandmeqRDKB-20181114-1
rdkb-ccsppandmeqRDKB-20181217-1
rdkb-ccsppandmeqRDKB-20181115
rdkb-ccsppandmeqRDKB-20181114
rdkb-ccsppandmeqRDKB-20181217
rdkb-ccsppandmeqIMPORT_INITIAL

Name	Operator	Version
rdkb-ccsppandm	eq	RDKB-20181114-1
rdkb-ccsppandm	eq	RDKB-20181217-1
rdkb-ccsppandm	eq	RDKB-20181115
rdkb-ccsppandm	eq	RDKB-20181114
rdkb-ccsppandm	eq	RDKB-20181217
rdkb-ccsppandm	eq	IMPORT_INITIAL

References

dojo.bullguard.com/dojo-by-bullguard/blog/the-gateway-is-wide-open