CVE-2023-41251

HIGH

7.2

Description

A stack-based buffer overflow vulnerability exists in the boa formRoute functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability.

CVE Details

CVSS v3.1 Score7.2

SeverityHIGH

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredHIGH

User InteractionNONE

Published7/8/2024

Last Modified11/4/2025

Sourcenvd

Honeypot Sightings0

Affected Products

level1:wbr-6013level1:wbr-6013_firmwarerealtek:rtl819x_jungle_software_development_kit

Weaknesses (CWE)

CWE-121CWE-787

References

https://talosintelligence.com/vulnerability_reports/TALOS-2023-1894(talos-cna@cisco.com)

https://talosintelligence.com/vulnerability_reports/TALOS-2023-1894(af854a3a-2127-422b-91ae-364da2661108)

https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1894(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.