nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-50382 CVE-2023-50382
HIGH
Record summary
CVE-2023-50382 has a selected CVSS score of 7.2 (high).
Description
Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This command injection is related to the `peerPin` request's parameter.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 24, 2024 · Source: CVE List
Affected products and versions
3| Product | Source | Version range | Status |
|---|---|---|---|
WBR-6013Browse LevelOne / WBR-6013Default status: unknown | CVE List | RER4_A_v3411b_2T2R_LEV_09_170623 | affected |
| rer4_a_v3411b_2t2r_lev_09_170623 | affected | ||
rtl819x Jungle SDKBrowse Realtek / rtl819x Jungle SDK | CVE List | v3.4.11 | affected |
rtl819x_software_development_kitBrowse realtek / rtl819x_software_development_kitDefault status: unknown | CVE List | 3.4.11 | affected |
References
3talosintelligence.com
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1899 talosintelligence.com
https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1899