[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fmhPfgvJfeh2yAqODYckxgnW-MEH9YkZS4jdjAZdQqCo":3,"g5a-risk:CVE-2019-6961":104},{"success":4,"data":5,"meta":102},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":15,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":49,"references":50,"referencesCount":49,"weaknesses":56,"weaknessesCount":49,"isActivelyExploited":65,"cisaInfo":15,"otxData":15,"relatedBlogPosts":66,"seoMetadata":67,"configurations":92,"relatedVendorCves":100,"notableEvents":101},"CVE-2019-6961","What is CVE-2019-6961?","Incorrect access control in actionHandlerUtility.php in the RDK RDKB-20181217-1 WebUI module allows a logged in user to control DDNS, QoS, RIP, and other privileged configurations (intended only for the network operator) by sending an HTTP POST to the PHP backend, because the page filtering for non-superuser (in header.php) is done only for GET requests and not for direct AJAX calls.","Incorrect access control in actionHandlerUtility.php in the RDK RDKB-20181217-1 WebUI module allows a logged in user to control DDNS, QoS, RIP, and other pri...","2019-06-20T14:15:11.047","2020-08-24T17:37:01.14",6.5,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":26,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","MEDIUM",2.8,3.6,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":27,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":23,"Authentication":35,"ConfidentialityImpact":24,"IntegrityImpact":36,"AvailabilityImpact":24,"BaseScore":37,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:N\u002FI:P\u002FA:N","SINGLE","PARTIAL",4,8,2.9,0.0091,[40,40,40,40,40,40,40],"Medium",[44],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"rdkcentral","rdkb_ccsppandm","rdkb-20181217-1","cpe:2.3:a:rdkcentral:rdkb_ccsppandm:rdkb-20181217-1:*:*:*:*:*:*:*",1,[51],{"url":52,"source":53,"tags":54},"https:\u002F\u002Fdojo.bullguard.com\u002Fdojo-by-bullguard\u002Fblog\u002Fthe-gateway-is-wide-open","Bullguard",[55],"Third Party Advisory",[57],{"id":58,"name":59,"description":60,"extendedDescription":61,"status":62,"abstraction":63,"structure":64},"CWE-862","Missing Authorization","The product does not perform an authorization check when an actor attempts to access a resource or perform an action.","Assuming a user with a given identity, authorization is the process of determining whether that user can access a given resource, based on the user's privileges and any permissions or other access-control specifications that apply to the resource.\nWhen access control checks are not applied, users are able to access data or perform actions that they should not be allowed to perform. This can lead to a wide range of problems, including information exposures, denial of service, and arbitrary code execution.","Incomplete","Class","Simple",false,[],{"title":68,"metaDescription":69,"keywords":70,"canonicalUrl":71,"structuredData":72},"What is CVE-2019-6961? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-6961, a medium severity cyber security vulnerability from 2019. Incorrect access control in actionHandlerUtility.php in th...","CVE-2019-6961, CVE-2019-6961 vulnerability, CVE-2019-6961 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, rdkcentral security, rdkb_ccsppandm vulnerability","\u002Fwhat-is\u002Fcve-2019-6961",{"@context":73,"@type":74,"headline":68,"description":69,"datePublished":10,"dateModified":11,"author":75,"publisher":79,"about":83,"mainEntityOfPage":87,"articleSection":90,"keywords":91},"https:\u002F\u002Fschema.org","TechArticle",{"@type":76,"name":77,"url":78},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":76,"name":77,"url":78,"logo":80},{"@type":81,"url":82},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":84,"name":6,"description":85,"additionalType":86},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":88,"@id":89},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-6961","Cybersecurity","CVE-2019-6961, CVE-2019-6961 vulnerability, CVE-2019-6961 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[93],{"Operator":15,"Negate":15,"Nodes":94},[95],{"Operator":96,"Negate":15,"CPEMatch":97},"OR",[98],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":99,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"2733315D-DC18-4435-AF7B-5BB9DA39C6DA",[],[],{"lastModified":11,"cacheTime":103,"version":33},1792443176384,{"score":105,"band":106,"action":107,"scoredAt":108},23,"Low","Monitor","2026-10-19T07:00:42.634213+00:00"]