CVE-2023-45742: Integer Overflow

Published Jul 8, 2024

Updated

An integer overflow vulnerability exists in the boa updateConfigIntoFlash functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary code execution. An attacker can send a sequence of requests to trigger this vulnerability.

Affected Software

3 affected components

Realtek Rtl819x Jungle Software Development Kit=3.4.11

All of the following

Level1 Wbr-6013 Firmware=rer4_a_v3411b_2t2r_lev_09_170623

Level1 Wbr-6013

Event History

Jul 8, 2024

CVE Published

via MITRE·03:22 PM

Data Sourced

via MITRE·03:22 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-45742?

CVE-2023-45742 has a high severity rating due to its potential for arbitrary code execution.

How do I fix CVE-2023-45742?

To mitigate CVE-2023-45742, update the Realtek rtl819x Jungle SDK to version 3.4.12 or later.

Who is affected by CVE-2023-45742?

CVE-2023-45742 affects users of Realtek rtl819x Jungle SDK v3.4.11 and specific Level1 Wbr-6013 firmware.

What kind of attacks can leverage CVE-2023-45742?

CVE-2023-45742 can be exploited through specially crafted HTTP requests that trigger an integer overflow.

Is there a public exploit for CVE-2023-45742?

As of now, there are no publicly available exploits confirmed for CVE-2023-45742.