CVE-2023-47677: CSRF

Published Jul 8, 2024

Updated

A cross-site request forgery (csrf) vulnerability exists in the boa CSRF protection functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted network request can lead to CSRF. An attacker can send an HTTP request to trigger this vulnerability.

Affected Software

3 affected components

Realtek Rtl819x Jungle Software Development Kit=3.4.11

All of the following

Level1 Wbr-6013 Firmware=rer4_a_v3411b_2t2r_lev_09_170623

Level1 Wbr-6013

Event History

Jul 8, 2024

CVE Published

via MITRE·03:25 PM

Data Sourced

via MITRE·03:25 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-47677?

CVE-2023-47677 is classified as a high severity vulnerability due to its potential for cross-site request forgery.

How do I fix CVE-2023-47677?

To mitigate CVE-2023-47677, users should update to the latest version of the Realtek rtl819x Jungle SDK or apply necessary security patches.

What types of devices are affected by CVE-2023-47677?

CVE-2023-47677 affects devices running Realtek rtl819x Jungle SDK version 3.4.11 and specific firmware such as Level1 Wbr-6013 with rer4_a_v3411b_2t2r_lev_09_170623.

What does CVE-2023-47677 allow an attacker to do?

CVE-2023-47677 allows an attacker to perform cross-site request forgery attacks by sending specially crafted HTTP requests.

Who is impacted by CVE-2023-47677?

Individuals and organizations using Realtek rtl819x Jungle SDK 3.4.11 or the affected Level1 Wbr-6013 firmware are at risk from CVE-2023-47677.