PT-2024-12932 · Realtek · Realtek Rtl819X Jungle Sdk

Francesco Benvenuto · Published 2024-07-08 · Updated 2024-07-11 · CVE-2023-41251

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Realtek rtl819x Jungle SDK version 3.4.11

Description A stack-based buffer overflow vulnerability exists in the boa formRoute functionality. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability.

Recommendations For Realtek rtl819x Jungle SDK version 3.4.11, as a temporary workaround, consider restricting access to the boa formRoute functionality until a patch is available. Avoid using the vulnerable functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Stack Overflow

Weakness Enumeration

CWE-787

CWE-121

Related Identifiers

CVE-2023-41251

Affected Products

Realtek Rtl819X Jungle Sdk

References · 9

• https://osv.dev/vulnerability/CVE-2023-41251 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-41251 · Security Note
• https://twitter.com/cracbot/status/1811279311334437319 · Twitter Post
• https://talosintelligence.com/vulnerability_reports/TALOS-2023-1894 · Note
• https://twitter.com/cracbot/status/1810554594831024621 · Twitter Post
• https://twitter.com/CVEnew/status/1810337811058266168 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1810405013623071173 · Twitter Post
• https://t.me/cvenotify/85370 · Telegram Post
• https://t.me/cvenotify/85868 · Telegram Post