CVE-2023-45215: Buffer Overflow

Published Jul 8, 2024

Updated

A stack-based buffer overflow vulnerability exists in the boa setRepeaterSsid functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to arbitrary code execution. An attacker can send a sequence of requests to trigger this vulnerability.

Affected Software

3 affected components

Realtek Rtl819x Jungle Software Development Kit=3.4.11

All of the following

Level1 Wbr-6013 Firmware=rer4_a_v3411b_2t2r_lev_09_170623

Level1 Wbr-6013

Event History

Jul 8, 2024

CVE Published

via MITRE·03:22 PM

Data Sourced

via MITRE·03:22 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-45215?

CVE-2023-45215 is a high-severity vulnerability that allows for arbitrary code execution due to a stack-based buffer overflow.

How do I fix CVE-2023-45215?

To fix CVE-2023-45215, update to the latest version of the Realtek rtl819x Jungle SDK or apply any available patches.

What systems are affected by CVE-2023-45215?

CVE-2023-45215 affects the Realtek rtl819x Jungle SDK version 3.4.11 and specific firmware versions of the Level1 Wbr-6013 router.

What can an attacker do with CVE-2023-45215?

An attacker can exploit CVE-2023-45215 to execute arbitrary code on affected systems by sending specially crafted network requests.

Is CVE-2023-45215 easily exploitable?

Yes, CVE-2023-45215 can be easily exploited if the attacker can initiate network requests to the vulnerable device.