CVE-2019-6963

A heap-based buffer overflow in cosa_dhcpv4_dml.c in the RDK RDKB-20181217-1 CcspPandM module may allow attackers with login credentials to achieve remote code…

published June 20, 2019

CVSS
—
EPSS
2%
Percentile
83.9
In the wild
Unconfirmed
What it is

A heap-based buffer overflow in cosa_dhcpv4_dml.c in the RDK RDKB-20181217-1 CcspPandM module may allow attackers with login credentials to achieve remote code execution by crafting a long buffer in the "Comment" field of an IP reservation form in the admin panel. This is related to the CcspCommonLibrary module.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02396 · 83.9th percentile
Published
2019-06-20T13:47Z
EPSS history
Timeline
  • 20 JUN 13:47Z
    A heap-based buffer overflow in cosa_dhcpv4_dml.c in the RDK RDKB-20181217-1 CcspPandM module may allow attackers with login credentials to achieve remote code…
    cvelistv5