rdkcentral records

48 published records for vendor rdkcentral.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

48 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2024-20080No exploit	In gnss service, there is a possible escalation of privilege due to improper certificate validation.linuxfoundation · yocto · CWE-295 Pre-auth Weak crypto	Critical9.8	—	0.3%	Jul 1, 2024
36Monitor	CVE-2019-6963No exploit	A heap-based buffer overflow in cosa_dhcpv4_dml.c in the RDK RDKB-20181217-1 CcspPandM module may allow attackers with login credentials to rdkcentral · rdkb ccsppandm · CWE-787 RCE Memory safety	High8.8	—	2.4%	Jun 20, 2019
36Monitor	CVE-2019-6964No exploit	A heap-based buffer over-read in Service_SetParamStringValue in cosa_x_cisco_com_ddns_dml.c of the RDK RDKB-20181217-1 CcspPandM module may rdkcentral · rdkb ccsppandm · CWE-125 Memory safety	High8.8	—	1.8%	Jun 20, 2019
35Monitor	CVE-2024-20040No exploit	In wlan firmware, there is a possible out of bounds write due to improper input validation.linuxfoundation · yocto · CWE-787 Pre-auth Memory safety	High8.8	—	0.2%	Mar 31, 2024
33Monitor	CVE-2024-20053No exploit	In flashc, there is a possible out of bounds write due to an uncaught exception.linuxfoundation · yocto · CWE-787 Local privilege escalation Memory safety	High8.4	—	0.1%	Mar 31, 2024
33Monitor	CVE-2024-20104No exploit	In da, there is a possible out of bounds write due to a missing bounds check.linuxfoundation · yocto · CWE-787 Local privilege escalation Memory safety	High8.4	—	0.1%	Nov 3, 2024
30Monitor	CVE-2019-6962No exploit	A shell injection issue in cosa_wifi_apis.c in the RDK RDKB-20181217-1 CcspWifiAgent module allows attackers with login credentials to execurdkcentral · rdkb ccsppandm · CWE-78 RCE Command injection	High7.5	—	1.6%	Jun 20, 2019
30Monitor	CVE-2024-20089No exploit	In wlan, there is a possible denial of service due to incorrect error handling.linuxfoundation · yocto · CWE-703 Pre-auth Denial of service	High7.5	—	0.3%	Sep 2, 2024
27Monitor	CVE-2025-20656No exploit	In DA, there is a possible out of bounds write due to a missing bounds check.linuxfoundation · yocto · CWE-787 Memory safety	Medium6.8	—	0.1%	Apr 7, 2025
27Monitor	CVE-2025-20696No exploit	In DA, there is a possible out of bounds write due to a missing bounds check.linuxfoundation · yocto · CWE-787 Memory safety	Medium6.8	—	0.1%	Aug 3, 2025
27Monitor	CVE-2025-20650No exploit	In da, there is a possible out of bounds write due to a missing bounds check.linuxfoundation · yocto · CWE-787 Memory safety	Medium6.8	—	0.1%	Mar 2, 2025
26Monitor	CVE-2019-6961No exploit	Incorrect access control in actionHandlerUtility.php in the RDK RDKB-20181217-1 WebUI module allows a logged in user to control DDNS, QoS, Rrdkcentral · rdkb ccsppandm · CWE-862 Broken access control (IDOR)	Medium6.5	—	0.9%	Jun 20, 2019
26Monitor	CVE-2024-20054No exploit	In gnss, there is a possible escalation of privilege due to a missing bounds check.linuxfoundation · yocto · CWE-787 Memory safety	Medium6.6	—	0.3%	Mar 31, 2024
26Monitor	CVE-2024-20006No exploit	In da, there is a possible out of bounds write due to a missing bounds check.rdkcentral · rdk-b · CWE-787 Local privilege escalation Memory safety	Medium6.7	—	0.2%	Feb 5, 2024
26Monitor	CVE-2024-20081No exploit	In gnss service, there is a possible out of bounds write due to improper input validation.linuxfoundation · yocto · CWE-787 Local privilege escalation Memory safety	Medium6.7	—	0.2%	Jul 1, 2024
26Monitor	CVE-2024-20022No exploit	In lk, there is a possible escalation of privilege due to a missing bounds check.linuxfoundation · yocto · CWE-125 Local privilege escalation Memory safety	Medium6.7	—	0.1%	Mar 3, 2024
26Monitor	CVE-2024-20143No exploit	In V6 DA, there is a possible out of bounds write due to a missing bounds check.linuxfoundation · yocto · CWE-787 Memory safety	Medium6.6	—	0.1%	Jan 6, 2025
26Monitor	CVE-2024-20144No exploit	In V6 DA, there is a possible out of bounds write due to a missing bounds check.linuxfoundation · yocto · CWE-787 Memory safety	Medium6.6	—	0.1%	Jan 6, 2025
26Monitor	CVE-2024-20145No exploit	In V6 DA, there is a possible out of bounds write due to a missing bounds check.linuxfoundation · yocto · CWE-787 Memory safety	Medium6.6	—	0.1%	Jan 6, 2025
26Monitor	CVE-2023-32855No exploit	In aee, there is a possible escalation of privilege due to a missing permission check.linuxfoundation · yocto · CWE-862 Local privilege escalation Broken access control (IDOR)	Medium6.7	—	0.1%	Dec 4, 2023
26Monitor	CVE-2024-20023No exploit	In flashc, there is a possible out of bounds write due to lack of valudation.linuxfoundation · yocto · CWE-787 Local privilege escalation Memory safety	Medium6.7	—	0.1%	Mar 3, 2024
26Monitor	CVE-2025-20635No exploit	In V6 DA, there is a possible out of bounds write due to a missing bounds check.linuxfoundation · yocto · CWE-787 Memory safety	Medium6.6	—	0.1%	Feb 3, 2025
26Monitor	CVE-2023-20725No exploit	In preloader, there is a possible out of bounds write due to a missing bounds check.rdkcentral · rdk-b · CWE-787 Local privilege escalation Memory safety	Medium6.7	—	0.1%	Jun 6, 2023
26Monitor	CVE-2023-20821No exploit	In nvram, there is a possible out of bounds write due to a missing bounds check.linuxfoundation · yocto · CWE-787 Local privilege escalation Memory safety	Medium6.7	—	0.1%	Sep 3, 2023
26Monitor	CVE-2023-20832No exploit	In gps, there is a possible out of bounds write due to a missing bounds check.linuxfoundation · yocto · CWE-787 Local privilege escalation Memory safety	Medium6.7	—	0.1%	Sep 3, 2023

CVE-2024-20080
39Monitor
In gnss service, there is a possible escalation of privilege due to improper certificate validation.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Weak crypto
linuxfoundation · yoctoJul 1, 2024
CVE-2019-6963
36Monitor
A heap-based buffer overflow in cosa_dhcpv4_dml.c in the RDK RDKB-20181217-1 CcspPandM module may allow attackers with login credentials to
HighCVSS 8.8No exploitEPSS 2%
- RCE
- Memory safety
rdkcentral · rdkb ccsppandmJun 20, 2019
CVE-2019-6964
36Monitor
A heap-based buffer over-read in Service_SetParamStringValue in cosa_x_cisco_com_ddns_dml.c of the RDK RDKB-20181217-1 CcspPandM module may
HighCVSS 8.8No exploitEPSS 2%
- Memory safety
rdkcentral · rdkb ccsppandmJun 20, 2019
CVE-2024-20040
35Monitor
In wlan firmware, there is a possible out of bounds write due to improper input validation.
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
linuxfoundation · yoctoMar 31, 2024
CVE-2024-20053
33Monitor
In flashc, there is a possible out of bounds write due to an uncaught exception.
HighCVSS 8.4No exploitEPSS 0%
- Local privilege escalation
- Memory safety
linuxfoundation · yoctoMar 31, 2024
CVE-2024-20104
33Monitor
In da, there is a possible out of bounds write due to a missing bounds check.
HighCVSS 8.4No exploitEPSS 0%
- Local privilege escalation
- Memory safety
linuxfoundation · yoctoNov 3, 2024
CVE-2019-6962
30Monitor
A shell injection issue in cosa_wifi_apis.c in the RDK RDKB-20181217-1 CcspWifiAgent module allows attackers with login credentials to execu
HighCVSS 7.5No exploitEPSS 2%
- RCE
- Command injection
rdkcentral · rdkb ccsppandmJun 20, 2019
CVE-2024-20089
30Monitor
In wlan, there is a possible denial of service due to incorrect error handling.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linuxfoundation · yoctoSep 2, 2024
CVE-2025-20656
27Monitor
In DA, there is a possible out of bounds write due to a missing bounds check.
MediumCVSS 6.8No exploitEPSS 0%
- Memory safety
linuxfoundation · yoctoApr 7, 2025
CVE-2025-20696
27Monitor
In DA, there is a possible out of bounds write due to a missing bounds check.
MediumCVSS 6.8No exploitEPSS 0%
- Memory safety
linuxfoundation · yoctoAug 3, 2025
CVE-2025-20650
27Monitor
In da, there is a possible out of bounds write due to a missing bounds check.
MediumCVSS 6.8No exploitEPSS 0%
- Memory safety
linuxfoundation · yoctoMar 2, 2025
CVE-2019-6961
26Monitor
Incorrect access control in actionHandlerUtility.php in the RDK RDKB-20181217-1 WebUI module allows a logged in user to control DDNS, QoS, R
MediumCVSS 6.5No exploitEPSS 1%
- Broken access control (IDOR)
rdkcentral · rdkb ccsppandmJun 20, 2019
CVE-2024-20054
26Monitor
In gnss, there is a possible escalation of privilege due to a missing bounds check.
MediumCVSS 6.6No exploitEPSS 0%
- Memory safety
linuxfoundation · yoctoMar 31, 2024
CVE-2024-20006
26Monitor
In da, there is a possible out of bounds write due to a missing bounds check.
MediumCVSS 6.7No exploitEPSS 0%
- Local privilege escalation
- Memory safety
rdkcentral · rdk-bFeb 5, 2024
CVE-2024-20081
26Monitor
In gnss service, there is a possible out of bounds write due to improper input validation.
MediumCVSS 6.7No exploitEPSS 0%
- Local privilege escalation
- Memory safety
linuxfoundation · yoctoJul 1, 2024
CVE-2024-20022
26Monitor
In lk, there is a possible escalation of privilege due to a missing bounds check.
MediumCVSS 6.7No exploitEPSS 0%
- Local privilege escalation
- Memory safety
linuxfoundation · yoctoMar 3, 2024
CVE-2024-20143
26Monitor
In V6 DA, there is a possible out of bounds write due to a missing bounds check.
MediumCVSS 6.6No exploitEPSS 0%
- Memory safety
linuxfoundation · yoctoJan 6, 2025
CVE-2024-20144
26Monitor
In V6 DA, there is a possible out of bounds write due to a missing bounds check.
MediumCVSS 6.6No exploitEPSS 0%
- Memory safety
linuxfoundation · yoctoJan 6, 2025
CVE-2024-20145
26Monitor
In V6 DA, there is a possible out of bounds write due to a missing bounds check.
MediumCVSS 6.6No exploitEPSS 0%
- Memory safety
linuxfoundation · yoctoJan 6, 2025
CVE-2023-32855
26Monitor
In aee, there is a possible escalation of privilege due to a missing permission check.
MediumCVSS 6.7No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
linuxfoundation · yoctoDec 4, 2023
CVE-2024-20023
26Monitor
In flashc, there is a possible out of bounds write due to lack of valudation.
MediumCVSS 6.7No exploitEPSS 0%
- Local privilege escalation
- Memory safety
linuxfoundation · yoctoMar 3, 2024
CVE-2025-20635
26Monitor
In V6 DA, there is a possible out of bounds write due to a missing bounds check.
MediumCVSS 6.6No exploitEPSS 0%
- Memory safety
linuxfoundation · yoctoFeb 3, 2025
CVE-2023-20725
26Monitor
In preloader, there is a possible out of bounds write due to a missing bounds check.
MediumCVSS 6.7No exploitEPSS 0%
- Local privilege escalation
- Memory safety
rdkcentral · rdk-bJun 6, 2023
CVE-2023-20821
26Monitor
In nvram, there is a possible out of bounds write due to a missing bounds check.
MediumCVSS 6.7No exploitEPSS 0%
- Local privilege escalation
- Memory safety
linuxfoundation · yoctoSep 3, 2023
CVE-2023-20832
26Monitor
In gps, there is a possible out of bounds write due to a missing bounds check.
MediumCVSS 6.7No exploitEPSS 0%
- Local privilege escalation
- Memory safety
linuxfoundation · yoctoSep 3, 2023