| Package | Affected versions | Patched versions |
|---|---|---|
| rdkb ccsppandm | = rdkb-20181217-1 |
A heap-based buffer overflow in cosa_dhcpv4_dml.c in the RDK RDKB-20181217-1 CcspPandM module may allow attackers with login credentials to achieve remote code execution by crafting a long buffer in the "Comment" field of an IP reservation form in the admin panel. This is related to the CcspCommonLibrary module.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free