PT-2019-18380 · Rdk · Rdk

Published 2019-06-20 · Updated 2020-08-24 · CVE-2019-6961

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions RDK RDKB-20181217-1 WebUI module (affected versions not specified)

Description The issue concerns incorrect access control in the actionHandlerUtility.php file, allowing a logged-in user to modify privileged configurations, such as DDNS, QoS, and RIP, by sending an HTTP POST request to the PHP backend. This is possible because the page filtering for non-superusers, implemented in header.php, only applies to GET requests and not to direct AJAX calls.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2019-6961

Affected Products

Rdk

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-6961 · Security Note
• https://osv.dev/vulnerability/CVE-2019-6961 · Vendor Advisory
• https://dojo.bullguard.com/dojo-by-bullguard/blog/the-gateway-is-wide-open · Note