CVE-2023-50381: OS Command Injection

Published Jul 8, 2024

Updated

Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This command injection is related to the targetAPSsid request's parameter.

Affected Software

3 affected components

Realtek Rtl819x Jungle Software Development Kit=3.4.11

All of the following

Level1 Wbr-6013 Firmware=rer4_a_v3411b_2t2r_lev_09_170623

Level1 Wbr-6013

Event History

Jul 8, 2024

CVE Published

via MITRE·03:22 PM

Data Sourced

via MITRE·03:22 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-50381?

CVE-2023-50381 is considered a high severity vulnerability due to the potential for arbitrary command execution.

How do I fix CVE-2023-50381?

To fix CVE-2023-50381, users should update to a patched version of the Realtek rtl819x Jungle SDK or affected firmware.

What types of devices are affected by CVE-2023-50381?

CVE-2023-50381 affects devices using Realtek rtl819x Jungle SDK v3.4.11 and specific firmware versions like Level1 Wbr-6013.

What can attackers achieve by exploiting CVE-2023-50381?

Exploiting CVE-2023-50381 allows attackers to execute arbitrary commands on the affected device.

How can the exploitation of CVE-2023-50381 be mitigated?

Mitigation for CVE-2023-50381 includes network protections, such as firewalls and intrusion detection systems, to block exploitation attempts.