[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fRKSsJLucVoI03pQ7GVX3JqjiZ2OY1MKOGJV4v9ukP04":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":33,"kevVulnerabilities":90,"topProductsByCves":91,"seoMetadata":95,"meta":104},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":32},26610,"rdkcentral",3,47,0,68,"2025-11-04","r",[16,21,27],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},136228,"rdk-b",2,41,{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},136230,"rdkb_ccsppandm",65,4,"2019-06-20",{"id":28,"product_name":29,"version_count":30,"cve_count":19,"kev_count":11,"last_cve_update":31},136229,"rdkb",1,"2024-03-04","Rdkcentral is a technology vendor with 3 tracked products and 47 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[34,42,46,51,57,63,70,76,82,86],{"cveId":35,"description":36,"publishedDate":26,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":40,"epssScore":41},"CVE-2019-6963","A heap-based buffer overflow in cosa_dhcpv4_dml.c in the RDK RDKB-20181217-1 CcspPandM module may allow attackers with login credentials to achieve remote code execution by crafting a long buffer in the \"Comment\" field of an IP reservation form in the admin panel. This is related to the CcspCommonLibrary module.",8.8,"v3.0","High",false,0.02396,{"cveId":43,"description":44,"publishedDate":26,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":40,"epssScore":45},"CVE-2019-6964","A heap-based buffer over-read in Service_SetParamStringValue in cosa_x_cisco_com_ddns_dml.c of the RDK RDKB-20181217-1 CcspPandM module may allow attackers with login credentials to achieve information disclosure and code execution by crafting an AJAX call responsible for DDNS configuration with an exactly 64-byte username, password, or domain, for which the buffer size is insufficient for the final '\\0' character. This is related to the CcspCommonLibrary and WebUI modules.",0.01755,{"cveId":47,"description":48,"publishedDate":26,"cvssScore":49,"cvssVersion":38,"severity":39,"isKev":40,"epssScore":50},"CVE-2019-6962","A shell injection issue in cosa_wifi_apis.c in the RDK RDKB-20181217-1 CcspWifiAgent module allows attackers with login credentials to execute arbitrary shell commands under the CcspWifiSsp process (running as root) if the platform was compiled with the ENABLE_FEATURE_MESHWIFI macro. The attack is conducted by changing the Wi-Fi network password to include crafted escape characters. This is related to the WebUI module.",7.5,0.01562,{"cveId":52,"description":53,"publishedDate":26,"cvssScore":54,"cvssVersion":38,"severity":55,"isKev":40,"epssScore":56},"CVE-2019-6961","Incorrect access control in actionHandlerUtility.php in the RDK RDKB-20181217-1 WebUI module allows a logged in user to control DDNS, QoS, RIP, and other privileged configurations (intended only for the network operator) by sending an HTTP POST to the PHP backend, because the page filtering for non-superuser (in header.php) is done only for GET requests and not for direct AJAX calls.",6.5,"Medium",0.0091,{"cveId":58,"description":59,"publishedDate":60,"cvssScore":49,"cvssVersion":61,"severity":39,"isKev":40,"epssScore":62},"CVE-2024-20089","In wlan, there is a possible denial of service due to incorrect error handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08861558; Issue ID: MSV-1526.","2024-09-02","v3.1",0.00306,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":67,"cvssVersion":61,"severity":68,"isKev":40,"epssScore":69},"CVE-2024-20080","In gnss service, there is a possible escalation of privilege due to improper certificate validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08720039; Issue ID: MSV-1424.","2024-07-01",9.8,"Critical",0.00285,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":74,"cvssVersion":61,"severity":55,"isKev":40,"epssScore":75},"CVE-2024-20054","In gnss, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08580200; Issue ID: ALPS08580200.","2024-04-01",6.6,0.00269,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":80,"cvssVersion":61,"severity":55,"isKev":40,"epssScore":81},"CVE-2024-20006","In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08477148; Issue ID: ALPS08477148.","2024-02-05",6.7,0.00223,{"cveId":83,"description":84,"publishedDate":66,"cvssScore":80,"cvssVersion":61,"severity":55,"isKev":40,"epssScore":85},"CVE-2024-20081","In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08719602; Issue ID: MSV-1412.",0.00217,{"cveId":87,"description":88,"publishedDate":73,"cvssScore":37,"cvssVersion":61,"severity":39,"isKev":40,"epssScore":89},"CVE-2024-20040","In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08360153 (for MT6XXX chipsets) \u002F WCNCR00363530 (for MT79XX chipsets); Issue ID: MSV-979.",0.00178,[],[92,93,94],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},{"id":28,"product_name":29,"version_count":30,"cve_count":19,"kev_count":11,"last_cve_update":31},{"title":96,"metaDescription":97,"keywords":98,"structuredData":99},"Rdkcentral - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Rdkcentral covering 3 products with 47 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Rdkcentral vulnerabilities, Rdkcentral security, Rdkcentral CVE, Rdkcentral threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":100,"@type":101,"name":102,"description":97,"url":103},"https:\u002F\u002Fschema.org","Organization","Rdkcentral","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Frdkcentral",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":105,"apiVersion":106},"2026-10-19T19:52:38.607Z","3.0"]