Realtek
Realtek Rtl819x Jungle Software Development KIT: vulnerabilidades y CVE
Realtek Rtl819x Jungle Software Development KIT tiene 23 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 3 son críticas y 2 figuran en el catálogo de explotación activa de CISA.
CVE23
Últimos 12 meses0
Críticas3
Explotadas activamente2
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2021-35394 | Crítica (9.8) | 100% | ⚠ Explotación activa | 16 ago 2021 | Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary. The binary is affected by multiple memory corruption vulnerabilities and an… |
| CVE-2021-35395 | Crítica (9.8) | 98% | ⚠ Explotación activa | 16 ago 2021 | Realtek Jungle SDK version v2.x up to v3.4.14B provides an HTTP web server exposing a management interface that can be used to configure the access point. Two versions of this management interface exists: one based on… |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2024-21778 | Alta (7.2) | 0.94% | — | 8 jul 2024 | A heap-based buffer overflow vulnerability exists in the configuration file mib_init_value_array functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted .dat file can lead to arbitrary code execution.… |
| CVE-2023-50383 | Alta (7.2) | 1.9% | — | 8 jul 2024 | Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker… |
| CVE-2023-50382 | Alta (7.2) | 1.9% | — | 8 jul 2024 | Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker… |
| CVE-2023-50381 | Alta (7.2) | 3.2% | — | 8 jul 2024 | Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker… |
| CVE-2023-50330 | Alta (7.2) | 1.1% | — | 8 jul 2024 | A stack-based buffer overflow vulnerability exists in the boa getInfo functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can… |
| CVE-2023-50244 | Alta (7.2) | 1.4% | — | 8 jul 2024 | Two stack-based buffer overflow vulnerabilities exist in the boa formIpQoS functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker… |
| CVE-2023-50243 | Alta (7.2) | 1.4% | — | 8 jul 2024 | Two stack-based buffer overflow vulnerabilities exist in the boa formIpQoS functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker… |
| CVE-2023-50240 | Alta (7.2) | 1.4% | — | 8 jul 2024 | Two stack-based buffer overflow vulnerabilities exist in the boa set_RadvdInterfaceParam functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to remote code… |
| CVE-2023-50239 | Alta (7.2) | 1.4% | — | 8 jul 2024 | Two stack-based buffer overflow vulnerabilities exist in the boa set_RadvdInterfaceParam functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to remote code… |
| CVE-2023-49867 | Alta (7.2) | 1.1% | — | 8 jul 2024 | A stack-based buffer overflow vulnerability exists in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can… |
| CVE-2023-49595 | Alta (7.2) | 0.89% | — | 8 jul 2024 | A stack-based buffer overflow vulnerability exists in the boa rollback_control_code functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to arbitrary code… |
| CVE-2023-49073 | Alta (7.2) | 0.89% | — | 8 jul 2024 | A stack-based buffer overflow vulnerability exists in the boa formFilter functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary code execution. An attacker… |
| CVE-2023-48270 | Alta (7.2) | 0.89% | — | 8 jul 2024 | A stack-based buffer overflow vulnerability exists in the boa formDnsv6 functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to arbitrary code execution. An… |
| CVE-2023-47856 | Alta (7.2) | 1.4% | — | 8 jul 2024 | A stack-based buffer overflow vulnerability exists in the boa set_RadvdPrefixParam functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to remote code execution.… |
| CVE-2023-47677 | Alta (8.8) | 0.36% | — | 8 jul 2024 | A cross-site request forgery (csrf) vulnerability exists in the boa CSRF protection functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted network request can lead to CSRF. An attacker can send an HTTP… |
| CVE-2023-45742 | Alta (7.2) | 1.2% | — | 8 jul 2024 | An integer overflow vulnerability exists in the boa updateConfigIntoFlash functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary code execution. An… |
| CVE-2023-45215 | Alta (7.2) | 1.0% | — | 8 jul 2024 | A stack-based buffer overflow vulnerability exists in the boa setRepeaterSsid functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to arbitrary code execution. An… |
| CVE-2023-41251 | Alta (7.2) | 1.3% | — | 8 jul 2024 | A stack-based buffer overflow vulnerability exists in the boa formRoute functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can… |
| CVE-2023-34435 | Alta (7.2) | 0.47% | — | 8 jul 2024 | A firmware update vulnerability exists in the boa formUpload functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted network packets can lead to arbitrary firmware update. An attacker can provide a… |
| CVE-2021-35395 | Crítica (9.8) | 98% | ⚠ Explotación activa | 16 ago 2021 | Realtek Jungle SDK version v2.x up to v3.4.14B provides an HTTP web server exposing a management interface that can be used to configure the access point. Two versions of this management interface exists: one based on… |
| CVE-2021-35394 | Crítica (9.8) | 100% | ⚠ Explotación activa | 16 ago 2021 | Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary. The binary is affected by multiple memory corruption vulnerabilities and an… |
| CVE-2021-35393 | Crítica (9.8) | 70% | — | 16 ago 2021 | Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols. The binary is usually named wscd or mini_upnpd and is the successor to miniigd. The… |
| CVE-2021-35392 | Alta (7.5) | 83% | — | 16 ago 2021 | Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols. The binary is usually named wscd or mini_upnpd and is the successor to miniigd. The… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.