Rdk B Webui
Monthly
Remote unauthenticated memory corruption in RDK-B WebUI (build rdkb-2025q4-kirkstone.04.10.26) arises from a heap-based buffer overflow in the multipart/form-data parser in jst_post.c, letting an attacker send a single crafted POST request to corrupt heap memory. Confirmed impact is denial of service via crashing the WebUI service, with potential remote code execution on the broadband gateway if the overflow is weaponized. No public exploit identified at time of analysis and the issue is not in CISA KEV; EPSS is low (0.29%, 21st percentile) despite the 9.8 CVSS.
Denial of service in RDK-B WebUI rdkb-2025q4-kirkstone.04.10.26 allows an authenticated remote attacker to crash the web management interface by sending a crafted `ssid_number` parameter to the `ajaxSet_wireless_network_configuration.jst` AJAX handler. The flaw was reported by CERT/CC and documented by independent researchers at Wrocław University of Technology alongside multiple other RDK-B vulnerabilities. No public exploit has been identified and EPSS scoring (0.16%, 6th percentile) reflects very low real-world exploitation probability.
Denial of service in RDK-B WebUI version rdkb-2025q4-kirkstone.04.10.26 is achievable by any remote unauthenticated attacker who submits an excessively large password value to the login handler, triggering uncontrolled resource consumption in the `check.jst` template. The flaw (CWE-400) requires no credentials, no user interaction, and no special configuration - any device with its WebUI reachable is vulnerable to availability loss. EPSS sits at 0.22% (13th percentile), and no active exploitation or public exploit code has been identified at time of analysis, keeping real-world urgency moderate despite the high CVSS base score.
Race condition in the authentication handler (`check.jst`) of RDK-B WebUI rdkb-2025q4-kirkstone allows remote unauthenticated attackers to bypass authentication by submitting concurrent login requests that exploit unsynchronized shared authentication state. Successful exploitation grants full administrative access to the broadband gateway device with high impact across confidentiality, integrity, and availability. No public exploit code has been identified at time of analysis, and EPSS scoring at 0.21% (12th percentile) reflects low observed exploitation activity despite the severity of the authentication bypass.
Authentication bypass in the RDK-B WebUI (broadband gateway management interface), build rdkb-2025q4-kirkstone.04.10.26, lets a remote unauthenticated attacker gain full administrative access by presenting a forged JWT whose RSA signature is invalid. The flaw lives in the signature-verification logic of jst_functions.c, which accepts tokens without properly validating the RSA signature. No public exploit is identified at time of analysis and EPSS is low (0.19%), but the CVSS 9.8 rating and trivial exploitation path make it a high-priority patch for exposed devices.
Remote unauthenticated memory corruption in RDK-B WebUI (build rdkb-2025q4-kirkstone.04.10.26) arises from a heap-based buffer overflow in the multipart/form-data parser in jst_post.c, letting an attacker send a single crafted POST request to corrupt heap memory. Confirmed impact is denial of service via crashing the WebUI service, with potential remote code execution on the broadband gateway if the overflow is weaponized. No public exploit identified at time of analysis and the issue is not in CISA KEV; EPSS is low (0.29%, 21st percentile) despite the 9.8 CVSS.
Denial of service in RDK-B WebUI rdkb-2025q4-kirkstone.04.10.26 allows an authenticated remote attacker to crash the web management interface by sending a crafted `ssid_number` parameter to the `ajaxSet_wireless_network_configuration.jst` AJAX handler. The flaw was reported by CERT/CC and documented by independent researchers at Wrocław University of Technology alongside multiple other RDK-B vulnerabilities. No public exploit has been identified and EPSS scoring (0.16%, 6th percentile) reflects very low real-world exploitation probability.
Denial of service in RDK-B WebUI version rdkb-2025q4-kirkstone.04.10.26 is achievable by any remote unauthenticated attacker who submits an excessively large password value to the login handler, triggering uncontrolled resource consumption in the `check.jst` template. The flaw (CWE-400) requires no credentials, no user interaction, and no special configuration - any device with its WebUI reachable is vulnerable to availability loss. EPSS sits at 0.22% (13th percentile), and no active exploitation or public exploit code has been identified at time of analysis, keeping real-world urgency moderate despite the high CVSS base score.
Race condition in the authentication handler (`check.jst`) of RDK-B WebUI rdkb-2025q4-kirkstone allows remote unauthenticated attackers to bypass authentication by submitting concurrent login requests that exploit unsynchronized shared authentication state. Successful exploitation grants full administrative access to the broadband gateway device with high impact across confidentiality, integrity, and availability. No public exploit code has been identified at time of analysis, and EPSS scoring at 0.21% (12th percentile) reflects low observed exploitation activity despite the severity of the authentication bypass.
Authentication bypass in the RDK-B WebUI (broadband gateway management interface), build rdkb-2025q4-kirkstone.04.10.26, lets a remote unauthenticated attacker gain full administrative access by presenting a forged JWT whose RSA signature is invalid. The flaw lives in the signature-verification logic of jst_functions.c, which accepts tokens without properly validating the RSA signature. No public exploit is identified at time of analysis and EPSS is low (0.19%), but the CVSS 9.8 rating and trivial exploitation path make it a high-priority patch for exposed devices.