{"id":"CVE-2023-41251","title":"A stack-based buffer overflow vulnerability exists in the boa formRoute functionality of Realtek rtl819x Jungle SDK v3.4.11","summary":"A stack-based buffer overflow vulnerability exists in the boa formRoute functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can send an HTTP requ…","severity":"high","cvss":7.2,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-121","CWE-787"],"vendor":"realtek","product":"rtl819x_jungle_software_development_kit","affected":["rtl819x_jungle_software_development_kit = 3.4.11","wbr-6013_firmware = rer4_a_v3411b_2t2r_lev_09_170623"],"published":"2024-07-08","updated":"2026-11-03","sourceUpdated":"2026-11-03T22:17:12.307","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2023-41251","references":[{"url":"https://talosintelligence.com/vulnerability_reports/TALOS-2023-1894","label":"talos-cna@cisco.com"},{"url":"https://talosintelligence.com/vulnerability_reports/TALOS-2023-1894","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1894","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"total","timestamp":"2024-07-25T03:55:30.724915Z"},"epss":0.01283,"epssPercentile":0.70168,"ingestedAt":"2026-11-05T06:38:03.572Z","slug":"CVE-2023-41251","body":"## Overview\n\nA stack-based buffer overflow vulnerability exists in the boa formRoute functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability.\n\n## Affected\n\n- `rtl819x_jungle_software_development_kit = 3.4.11`\n- `wbr-6013_firmware = rer4_a_v3411b_2t2r_lev_09_170623`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":52,"depthScoreParts":{"impact":39.6,"likelihood":0.3,"exploitation":12,"ransomware":0},"changes":[]}