CVE-2023-50243

Two stack-based buffer overflow vulnerabilities exist in the boa formIpQoS functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This stack-based buffer overflow is related to the `comment` request's parameter.
Configurations

Configuration 1 (hide)

cpe:2.3:a:realtek:rtl819x_jungle_software_development_kit:3.4.11:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:level1:wbr-6013_firmware:rer4_a_v3411b_2t2r_lev_09_170623:*:*:*:*:*:*:*
cpe:2.3:h:level1:wbr-6013:-:*:*:*:*:*:*:*

History

21 Nov 2024, 08:36

Type Values Removed Values Added
References () https://talosintelligence.com/vulnerability_reports/TALOS-2023-1895 - Exploit, Third Party Advisory () https://talosintelligence.com/vulnerability_reports/TALOS-2023-1895 - Exploit, Third Party Advisory

11 Jul 2024, 16:05

Type Values Removed Values Added
References () https://talosintelligence.com/vulnerability_reports/TALOS-2023-1895 - () https://talosintelligence.com/vulnerability_reports/TALOS-2023-1895 - Exploit, Third Party Advisory
CWE CWE-787
First Time Level1 wbr-6013 Firmware
Realtek
Level1
Level1 wbr-6013
Realtek rtl819x Jungle Software Development Kit
Summary
  • (es) Existen dos vulnerabilidades de desbordamiento de búfer en la región stack de la memoria en la funcionalidad boa formIpQoS de Realtek rtl819x Jungle SDK v3.4.11. Una serie de solicitudes HTTP especialmente manipuladas pueden conducir a la ejecución remota de código. Un atacante puede enviar una serie de solicitudes HTTP para desencadenar estas vulnerabilidades. Este desbordamiento de búfer en la región stack de la memoria está relacionado con el parámetro de solicitud "comment".
CPE cpe:2.3:o:level1:wbr-6013_firmware:rer4_a_v3411b_2t2r_lev_09_170623:*:*:*:*:*:*:*
cpe:2.3:h:level1:wbr-6013:-:*:*:*:*:*:*:*
cpe:2.3:a:realtek:rtl819x_jungle_software_development_kit:3.4.11:*:*:*:*:*:*:*

08 Jul 2024, 16:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-07-08 16:15

Updated : 2024-11-21 08:36


NVD link : CVE-2023-50243

Mitre link : CVE-2023-50243

CVE.ORG link : CVE-2023-50243


JSON object : View

Products Affected

realtek

  • rtl819x_jungle_software_development_kit

level1

  • wbr-6013
  • wbr-6013_firmware
CWE
CWE-121

Stack-based Buffer Overflow

CWE-787

Out-of-bounds Write