CVE-2023-48270

A stack-based buffer overflow vulnerability exists in the boa formDnsv6 functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to arbitrary code execution. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2023-45742

An integer overflow vulnerability exists in the boa updateConfigIntoFlash functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary code execution. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2023-45742

An integer overflow vulnerability exists in the boa updateConfigIntoFlash functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary code execution. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2023-49595

A stack-based buffer overflow vulnerability exists in the boa rollbackcontrolcode functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to arbitrary code execution. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2023-49595

A stack-based buffer overflow vulnerability exists in the boa rollbackcontrolcode functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to arbitrary code execution. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2023-45742

CVE-2023-45742 is an integer-overflow vulnerability in Realtek rtl819x Jungle SDK v3.4.11 that affects the Boa web server used by LevelOne WBR-6013 routers. The flaw arises in updateConfigIntoFlash during processing of uploaded configuration data; a crafted HTTP request sequence can cause a heap-...

CVE-2023-49595

CVE-2023-49595 affects Realtek rtl819x Jungle SDK v3.4.11 (Boa web server) used by LevelOne WBR-6013. A stack-based buffer overflow in the rollback_control_code handler occurs when parsing pskValue in the /boafrm/formWlEncrypt API, allowing arbitrary code execution on a remote attacker-supplied H...

CVE-2023-47856

A stack-based buffer overflow vulnerability exists in the boa setRadvdPrefixParam functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2023-45215

Realtek rtl819x Jungle SDK v3.4.11 contains a stack-based buffer overflow in the boa web server API setRepeaterSsid. TALOS-2023-1891 explains that, when repeaterEnabled and repeaterSSID parameters are processed, an unchecked copy into a 33-byte stack buffer in setRepeaterSsid can overflow, allowi...

CVE-2023-45215

A stack-based buffer overflow vulnerability exists in the boa setRepeaterSsid functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to arbitrary code execution. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2023-47856

A stack-based buffer overflow vulnerability exists in the boa setRadvdPrefixParam functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2023-45215

A stack-based buffer overflow vulnerability exists in the boa setRepeaterSsid functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to arbitrary code execution. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2023-47856

Realtek rtl819x Jungle SDK v3.4.11 contains a stack-based buffer overflow in Boa’s set_RadvdPrefixParam API (formRadvd) that can be triggered by crafted HTTP requests to cause remote code execution. Affected hardware includes LevelOne WBR-6013 routers using Jungle SDK and Boa web server. TALOS de...

CVE-2023-50239

Two stack-based buffer overflow vulnerabilities exist in the boa setRadvdInterfaceParam functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger these...

CVE-2023-50240

Two stack-based buffer overflow vulnerabilities exist in the boa setRadvdInterfaceParam functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger these...

CVE-2023-50239

Two stack-based buffer overflow vulnerabilities exist in the boa setRadvdInterfaceParam functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger these...

CVE-2023-50239

Two stack-based buffer overflow vulnerabilities (CVE-2023-50239, CVE-2023-50240) exist in Realtek rtl819x Jungle SDK v3.4.11, used by Boa web server in the LevelOne WBR-6013 router. The flaw is in set_RadvdInterfaceParam: the interfacename parameter is copied into a stack-allocated radvdCfgParam ...

CVE-2023-50240

Realtek rtl819x Jungle SDK v3.4.11 contains two stack-based buffer overflow vulnerabilities in boa’s formRadvd interfaces (set_RadvdInterfaceParam), allowing remote code execution when an attacker crafts requests that supply oversized interfacename or AdvDefaultPreference parameters. The flaws re...

CVE-2023-50240

Two stack-based buffer overflow vulnerabilities exist in the boa setRadvdInterfaceParam functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger these...

CVE-2023-41251

A stack-based buffer overflow vulnerability exists in the boa formRoute functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability...