CVE-2023-49867
Published: 08 July 2024
Summary
CVE-2023-49867 is a high-severity Stack-based Buffer Overflow (CWE-121) vulnerability in Realtek Rtl819X Jungle Software Development Kit. Its CVSS base score is 7.2 (High).
Operationally, ranked in the top 6.7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
A stack-based buffer overflow vulnerability exists in the boa formWsc functionality of Realtek rtl819x Jungle SDK version 3.4.11 and is tracked as CVE-2023-49867. The flaw, also associated with CWE-121 and CWE-787, can be triggered by a specially crafted series of HTTP requests and may result in remote code execution. It received a CVSS 3.1 score of 7.2 reflecting network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability.
An attacker with high privileges can send the malicious HTTP requests over the network to exploit the issue and achieve arbitrary code execution on the affected device. The published EPSS score stands at 0.1010 with no material rise from a lower baseline.
Detailed analysis of the vulnerability, including proof-of-concept information, is available in the Talos Intelligence advisory TALOS-2023-1904. No information on patches or specific mitigation steps is provided in the available references.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-53773
Vulnerability details
A stack-based buffer overflow vulnerability exists in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can send a series of HTTP requests to…
more
trigger this vulnerability.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Out-of-bounds writes that corrupt control flow or inject shellcode are rendered non-executable by the same memory protections.