CVE-2023-34435: High severity Realtek Rtl819x Jungle Software Development Kit vulnerability

Published Jul 8, 2024

Updated

A firmware update vulnerability exists in the boa formUpload functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted network packets can lead to arbitrary firmware update. An attacker can provide a malicious file to trigger this vulnerability.

Affected Software

3 affected components

Realtek Rtl819x Jungle Software Development Kit=3.4.11

All of the following

Level1 Wbr-6013 Firmware=rer4_a_v3411b_2t2r_lev_09_170623

Level1 Wbr-6013

Event History

Jul 8, 2024

CVE Published

via MITRE·03:25 PM

Data Sourced

via MITRE·03:25 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-34435?

CVE-2023-34435 is considered a critical vulnerability due to its potential for arbitrary firmware updates.

How do I fix CVE-2023-34435?

To mitigate CVE-2023-34435, update the firmware to a version that addresses this vulnerability or apply relevant patches provided by the vendor.

What types of devices are affected by CVE-2023-34435?

Devices affected by CVE-2023-34435 include those using Realtek rtl819x Jungle SDK v3.4.11 and certain Level1 Wbr-6013 Firmware versions.

What is the impact of CVE-2023-34435 if exploited?

If exploited, CVE-2023-34435 allows attackers to upload malicious firmware, potentially compromising the affected device.

Is there a workaround for CVE-2023-34435?

While there is no official workaround for CVE-2023-34435, limiting network access and monitoring for suspicious activity may reduce risk.