Rtl819x Jungle Software Development Kit vulnerabilities

21 known vulnerabilities in Rtl819x Jungle Software Development Kit from Realtek. 21 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  WBR-6013: Out-of-bounds Write

  CVE-2024-21778Jul 8, 2024LevelOne

  A heap-based buffer overflow vulnerability exists in the configuration file mib_init_value_array functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted .dat file can lead to arbitrary code execution. An attacker can upload a malicious file to

• 7.2 High severity

  WBR-6013: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-50383Jul 8, 2024LevelOneEPSS 1.93%

  Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trig

• 7.2 High severity

  WBR-6013: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-50382Jul 8, 2024LevelOneEPSS 1.93%

  Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trig

• 7.2 High severity

  WBR-6013: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-50381Jul 8, 2024LevelOneEPSS 3.19%

  Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trig

• 7.2 High severity

  WBR-6013: Out-of-bounds Write

  CVE-2023-50330Jul 8, 2024LevelOneEPSS 1.1%

  A stack-based buffer overflow vulnerability exists in the boa getInfo functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can send a series of HTTP requests to trigger

• 7.2 High severity

  WBR-6013: Out-of-bounds Write

  CVE-2023-50244Jul 8, 2024LevelOneEPSS 1.41%

  Two stack-based buffer overflow vulnerabilities exist in the boa formIpQoS functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can send a series of HTTP requests to tri

• 7.2 High severity

  WBR-6013: Out-of-bounds Write

  CVE-2023-50243Jul 8, 2024LevelOneEPSS 1.41%

  Two stack-based buffer overflow vulnerabilities exist in the boa formIpQoS functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can send a series of HTTP requests to tri

• 7.2 High severity

  WBR-6013: Out-of-bounds Write

  CVE-2023-50240Jul 8, 2024LevelOneEPSS 1.41%

  Two stack-based buffer overflow vulnerabilities exist in the boa set_RadvdInterfaceParam functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to remote code execution. An attacker can send a sequence of r

• 7.2 High severity

  WBR-6013: Out-of-bounds Write

  CVE-2023-50239Jul 8, 2024LevelOneEPSS 1.41%

  Two stack-based buffer overflow vulnerabilities exist in the boa set_RadvdInterfaceParam functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to remote code execution. An attacker can send a sequence of r

• 7.2 High severity

  WBR-6013: Out-of-bounds Write

  CVE-2023-49867Jul 8, 2024LevelOneEPSS 1.1%

  A stack-based buffer overflow vulnerability exists in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can send a series of HTTP requests to trigger

• 7.2 High severity

  WBR-6013: Out-of-bounds Write

  CVE-2023-49595Jul 8, 2024LevelOne

  A stack-based buffer overflow vulnerability exists in the boa rollback_control_code functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to arbitrary code execution. An attacker can send a sequence of req

• 7.2 High severity

  WBR-6013: Out-of-bounds Write

  CVE-2023-49073Jul 8, 2024LevelOne

  A stack-based buffer overflow vulnerability exists in the boa formFilter functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary code execution. An attacker can send a sequence of requests to trigg

• 7.2 High severity

  WBR-6013: Out-of-bounds Write

  CVE-2023-48270Jul 8, 2024LevelOne

  A stack-based buffer overflow vulnerability exists in the boa formDnsv6 functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to arbitrary code execution. An attacker can send a sequence of requests to tri

• 7.2 High severity

  WBR-6013: Out-of-bounds Write

  CVE-2023-47856Jul 8, 2024LevelOneEPSS 1.41%

  A stack-based buffer overflow vulnerability exists in the boa set_RadvdPrefixParam functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to remote code execution. An attacker can send a sequence of request

• 8.8 High severity

  WBR-6013: Cross-Site Request Forgery

  CVE-2023-47677Jul 8, 2024LevelOne

  A cross-site request forgery (csrf) vulnerability exists in the boa CSRF protection functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted network request can lead to CSRF. An attacker can send an HTTP request to trigger this vulnerability.

• 7.2 High severity

  WBR-6013: Integer Overflow or Wraparound

  CVE-2023-45742Jul 8, 2024LevelOneEPSS 1.18%

  An integer overflow vulnerability exists in the boa updateConfigIntoFlash functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary code execution. An attacker can send a sequence of requests to trig

• 7.2 High severity

  WBR-6013: Out-of-bounds Write

  CVE-2023-45215Jul 8, 2024LevelOneEPSS 1.04%

  A stack-based buffer overflow vulnerability exists in the boa setRepeaterSsid functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to arbitrary code execution. An attacker can send a sequence of requests

• 7.2 High severity

  WBR-6013: Out-of-bounds Write

  CVE-2023-41251Jul 8, 2024LevelOneEPSS 1.28%

  A stack-based buffer overflow vulnerability exists in the boa formRoute functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can send an HTTP request to trigger this vul

• 7.2 High severity

  WBR-6013: Improper Verification of Cryptographic Signature

  CVE-2023-34435Jul 8, 2024LevelOne

  A firmware update vulnerability exists in the boa formUpload functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted network packets can lead to arbitrary firmware update. An attacker can provide a malicious file to trigger this vulnerability.

• 9.8 Critical severity

  Realtek AP-Router SDK Buffer Overflow Exploited

  CVE-2021-35395Aug 16, 2021RealtekEPSS 98.1%

  Realtek Jungle SDK version v2.x up to v3.4.14B provides an HTTP web server exposing a management interface that can be used to configure the access point. Two versions of this management interface exists: one based on Go-Ahead named webs and another based on B

• 9.8 Critical severity

  Realtek Jungle SDK Remote Code Execution Exploited

  CVE-2021-35394Aug 16, 2021RealtekEPSS 99.9%

  Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary. The binary is affected by multiple memory corruption vulnerabilities and an arbitrary command injection vulnerability t