Realtek RTL819x Jungle SDK Buffer Overflow Vulnerabilities
CVE-2023-50240

7.2HIGH

Key Information:

Vendor

Levelone

Status
Wbr-6013
Rtl819x Jungle Sdk
Vendor
CVE Published:
8 July 2024

What is CVE-2023-50240?

The vulnerabilities in the Realtek rtl819x Jungle SDK v3.4.11 stem from stack-based buffer overflows triggered by the set_RadvdInterfaceParam functionality. When an attacker sends a specific sequence of network requests, it can result in the execution of arbitrary code. The vulnerability is primarily related to the parameter AdvDefaultPreference, which, if crafted correctly, can lead to system compromise. Addressing these security flaws is crucial to safeguard affected systems from potential exploitation.

Affected Version(s)

rtl819x Jungle SDK v3.4.11

WBR-6013 RER4_A_v3411b_2T2R_LEV_09_170623

References

https://talosintelligence.com/vulnerability_reports/TALOS...

EPSS Score

10% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Discovered by Francesco Benvenuto of Cisco Talos.
JSON
.
CVE-2023-50240 : Realtek RTL819x Jungle SDK Buffer Overflow Vulnerabilities