VYPR

CcspPandM

by Cisco Systems, Inc.

CVEs (1)

  • CVE-2019-6964HigJun 20, 2019
    risk 0.57cvss 8.8epss 0.02

    A heap-based buffer over-read in Service_SetParamStringValue in cosa_x_cisco_com_ddns_dml.c of the RDK RDKB-20181217-1 CcspPandM module may allow attackers with login credentials to achieve information disclosure and code execution by crafting an AJAX call responsible for DDNS…