high7.2
CVE-2023-45742
An integer overflow vulnerability exists in the boa updateConfigIntoFlash functionality of Realtek rtl819x Jungle SDK v3.4.11.
Impact
An integer overflow vulnerability exists in the boa updateConfigIntoFlash functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary code execution. An attacker can send a sequence of requests to trigger this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Realtek | Rtl819x Jungle Software Development Kit | Version 3.4.11 |
| Level1 | Wbr-6013 Firmware | Version rer4_a_v3411b_2t2r_lev_09_170623 |