CVE-2023-41251

A stack-based buffer overflow vulnerability exists in the boa formRoute functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2023-50243

Realtek rtl819x Jungle SDK v3.4.11 (Boa web server) contains two stack-based buffer overflow vulnerabilities in boa formIpQoS: CVE-2023-50243 (comment) and CVE-2023-50244 (entry_name). Exploitation via specially crafted HTTP requests to /boafrm/formIpQoS can lead to remote code execution; PoCs ar...

CVE-2023-50244

Two stack-based buffer overflow vulnerabilities exist in the boa formIpQoS functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This...

CVE-2023-50244

Summary (CVE-2023-50244): Realtek rtl819x Jungle SDK v3.4.11 uses Boa as a web server; the Boa API /boafrm/formIpQoS contains two stack-based buffer overflow conditions in the entry_name and comment handling. Specifically, the issue arises when a crafted HTTP request supplies a long entry_name pa...

CVE-2023-50243

Two stack-based buffer overflow vulnerabilities exist in the boa formIpQoS functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This...

CVE-2023-50381

CVE-2023-50381 concerns Realtek rtl819x Jungle SDK v3.4.11 (Boa web server) used in LevelOne WBR-6013 and related devices. The flaw occurs in the boa formWsc API, where the targetAPSsid parameter (and related inputs) can be unsafely incorporated into system commands, enabling OS command injection...

CVE-2023-50383

CVE-2023-50383 refers to OS command injection vulnerabilities in the Realtek rtl819x Jungle SDK v3.4.11, exposed via the Boa web server’s /boafrm/formWsc API. The Talos analysis details three related CVEs (CVE-2023-50381, CVE-2023-50383, CVE-2023-50382) arising from unsafely handled HTTP paramete...

CVE-2023-50382

Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This comman...

CVE-2023-50383

Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This comman...

CVE-2023-50381

Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This comman...

CVE-2023-50382

Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This comman...

CVE-2023-50383

Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This comman...

CVE-2023-50382

CVE-2023-50382 and related vulnerabilities in Realtek rtl819x Jungle SDK v3.4.11 (Boa web server) affect the LevelOne WBR-6013 router. Three OS command injection flaws exist in the boa formWsc API via parameters targetAPSsid, peerPin, localPin, enabling arbitrary command execution. Talos reports ...

CVE-2023-49867

A stack-based buffer overflow vulnerability exists in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can send a series of HTTP requests to trigger this vulnerability...

CVE-2023-50330

CVE-2023-50330 concerns the Realtek rtl819x Jungle SDK v3.4.11, where the Boa web server’s boa getInfo template is exploitable via a crafted sequence of HTTP requests. The root cause is a stack-based buffer overflow in the translate_control_code path used to URL-encode WPA-PSK values, which can o...

Realtek rtl819x Jungle SDK configuration file mib_init_value_array heap-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2024-1911 Realtek rtl819x Jungle SDK configuration file mibinitvaluearray heap-based buffer overflow vulnerability July 8, 2024 CVE Number CVE-2024-21778 SUMMARY A heap-based buffer overflow vulnerability exists in the configuration file mibinitvaluearray...

Realtek rtl819x Jungle SDK OS Command Injection Vulnerability

The Realtek rtl819x Jungle SDK is a driver for a wireless LAN chip from China-based Realtek Semiconductor Realtek. An OS command injection vulnerability exists in Realtek rtl819x Jungle SDK version v3.4.11, which stems from an OS command injection vulnerability in the boa formWsc function...

Realtek AP-Router SDK Input Validation Error Vulnerability

The Realtek AP-Router SDK is a software package for wireless chipsets from Realtek Semiconductor Realtek of China. An input validation error vulnerability exists in the Realtek AP-Router SDK, which stems from an integer overflow vulnerability in the boa updateConfigIntoFlash function, which can...

PT-2024-13829 · Realtek · Realtek Rtl819X Jungle Sdk

Name of the Vulnerable Software and Affected Versions: Realtek rtl819x Jungle SDK version 3.4.11 Description: A stack-based buffer overflow vulnerability exists in the boa formWsc functionality. This can be triggered by a specially crafted series of HTTP requests, potentially leading to remote co...

Realtek AP-Router SDK Cross-Site Request Forgery Vulnerability

The Realtek AP-Router SDK is a software package for wireless chipsets from Realtek Semiconductor Realtek of China. A cross-site request forgery vulnerability exists in the Realtek AP-Router SDK, which stems from a cross-site request forgery CSRF vulnerability in the boa CSRF protection feature. T...