high7.2
CVE-2023-50382
Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11.
Impact
Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This command injection is related to the `peerPin` request's parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Realtek | Rtl819x Jungle Software Development Kit | Version 3.4.11 |
| Level1 | Wbr-6013 Firmware | Version rer4_a_v3411b_2t2r_lev_09_170623 |