Описание
Improper cryptographic signature verification in jst_functions.c in RDK-B WebUI rdkb-2025q4-kirkstone.04.10.26 allows a remote attacker to bypass authentication and obtain administrative access via a forged JWT containing an invalid RSA signature.
EPSS
Процентиль: 29%
0.00366
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-347
Связанные уязвимости
CVSS3: 9.8
github
2 месяца назад
Improper cryptographic signature verification in `jst_functions.c` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows a remote attacker to bypass authentication and obtain administrative access via a forged JWT containing an invalid RSA signature.
EPSS
Процентиль: 29%
0.00366
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-347