CVE-2023-50244
Published: 08 July 2024
Summary
CVE-2023-50244 is a high-severity Stack-based Buffer Overflow (CWE-121) vulnerability in Realtek Rtl819X Jungle Software Development Kit. Its CVSS base score is 7.2 (High).
Operationally, ranked in the top 6.7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
CVE-2023-50244 is a stack-based buffer overflow in the boa formIpQoS functionality of Realtek rtl819x Jungle SDK version 3.4.11, tracked under CWE-121 and CWE-787. The flaw is triggered by the entry_name parameter in HTTP requests and can result in remote code execution when a specially crafted series of requests is processed.
An attacker with high privileges can send crafted HTTP requests over the network to exploit the vulnerability and achieve full remote code execution on the affected device. The CVSS 7.2 score reflects network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability.
The associated EPSS score has remained flat at 0.1010 with no material rise after disclosure. Detailed technical analysis is available in the Talos reports referenced for this CVE.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-55063
Vulnerability details
Two stack-based buffer overflow vulnerabilities exist in the boa formIpQoS functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can send a series of HTTP requests to…
more
trigger these vulnerabilities.This stack-based buffer overflow is related to the `entry_name` request's parameter.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Out-of-bounds writes that corrupt control flow or inject shellcode are rendered non-executable by the same memory protections.