Vulnerabilities

TI-2023-25815 CVE-2023-47677 · GHSA-qgm4-625p-5hgm

Cross-site request forgery in LevelOne WBR-6013

HIGH 73

A cross-site request forgery (csrf) vulnerability exists in the boa CSRF protection functionality of Realtek rtl819x Jungle SDK v3.4.11.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00365 Published 2024-07-08 No fix listed CWE-352

TI-2023-17261 CVE-2023-34435 · GHSA-6fc2-jr2c-4p94

Improper signature verification in LevelOne WBR-6013

LOW 34

A firmware update vulnerability exists in the boa formUpload functionality of Realtek rtl819x Jungle SDK v3.4.11.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00471 Published 2024-07-08 No fix listed CWE-347

TI-2024-14461 CVE-2024-21778 · GHSA-pjqw-c568-j595

Heap-based buffer overflow in LevelOne WBR-6013

HIGH 67

A heap-based buffer overflow vulnerability exists in the configuration file mib_init_value_array functionality of Realtek rtl819x Jungle SDK v3.4.11.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00943 Published 2024-07-08 No fix listed CWE-122

TI-2023-26738 CVE-2023-49073 · GHSA-78wj-996p-5487

Stack-based buffer overflow in LevelOne WBR-6013

HIGH 67

A stack-based buffer overflow vulnerability exists in the boa formFilter functionality of Realtek rtl819x Jungle SDK v3.4.11.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00893 Published 2024-07-08 No fix listed CWE-121

TI-2023-26133 CVE-2023-48270 · GHSA-3hv4-r3g6-p2wr

Stack-based buffer overflow in LevelOne WBR-6013

HIGH 67

A stack-based buffer overflow vulnerability exists in the boa formDnsv6 functionality of Realtek rtl819x Jungle SDK v3.4.11.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00893 Published 2024-07-08 No fix listed CWE-121

TI-2023-24516 CVE-2023-45742 · GHSA-fpvc-fj96-p4xw

Integer overflow in LevelOne WBR-6013

LOW 36

An integer overflow vulnerability exists in the boa updateConfigIntoFlash functionality of Realtek rtl819x Jungle SDK v3.4.11.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01178 Published 2024-07-08 No fix listed CWE-190

TI-2023-27087 CVE-2023-49595 · GHSA-2c6c-5vmc-49j8

Stack-based buffer overflow in LevelOne WBR-6013

HIGH 67

A stack-based buffer overflow vulnerability exists in the boa rollback_control_code functionality of Realtek rtl819x Jungle SDK v3.4.11.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00893 Published 2024-07-08 No fix listed CWE-121

TI-2023-24223 CVE-2023-45215 · GHSA-p42v-6r34-hjg9

Stack-based buffer overflow in LevelOne WBR-6013

HIGH 67

A stack-based buffer overflow vulnerability exists in the boa setRepeaterSsid functionality of Realtek rtl819x Jungle SDK v3.4.11.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01041 Published 2024-07-08 No fix listed CWE-121

TI-2023-25964 CVE-2023-47856 · GHSA-76gm-vjp3-ccm7

Stack-based buffer overflow in LevelOne WBR-6013

HIGH 67

A stack-based buffer overflow vulnerability exists in the boa set_RadvdPrefixParam functionality of Realtek rtl819x Jungle SDK v3.4.11.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01413 Published 2024-07-08 No fix listed CWE-121

TI-2023-27470 CVE-2023-50240 · GHSA-2qjj-5hcf-4j4c

Stack-based buffer overflow in LevelOne WBR-6013

HIGH 67

Two stack-based buffer overflow vulnerabilities exist in the boa set_RadvdInterfaceParam functionality of Realtek rtl819x Jungle SDK v3.4.11.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01413 Published 2024-07-08 No fix listed CWE-121

TI-2023-27469 CVE-2023-50239 · GHSA-57c8-xcw6-x8h7

Stack-based buffer overflow in LevelOne WBR-6013

HIGH 67

Two stack-based buffer overflow vulnerabilities exist in the boa set_RadvdInterfaceParam functionality of Realtek rtl819x Jungle SDK v3.4.11.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01413 Published 2024-07-08 No fix listed CWE-121

TI-2023-21857 CVE-2023-41251 · GHSA-9vwx-mwx6-73vm

Stack-based buffer overflow in LevelOne WBR-6013

HIGH 67

A stack-based buffer overflow vulnerability exists in the boa formRoute functionality of Realtek rtl819x Jungle SDK v3.4.11.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01283 Published 2024-07-08 No fix listed CWE-121

TI-2023-27472 CVE-2023-50244 · GHSA-xvjg-4qjv-mmc7

Stack-based buffer overflow in LevelOne WBR-6013

HIGH 67

Two stack-based buffer overflow vulnerabilities exist in the boa formIpQoS functionality of Realtek rtl819x Jungle SDK v3.4.11.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01413 Published 2024-07-08 No fix listed CWE-121

TI-2023-27471 CVE-2023-50243 · GHSA-rjhj-vqcv-2qcm

Stack-based buffer overflow in LevelOne WBR-6013

HIGH 67

Two stack-based buffer overflow vulnerabilities exist in the boa formIpQoS functionality of Realtek rtl819x Jungle SDK v3.4.11.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01413 Published 2024-07-08 No fix listed CWE-121

TI-2023-27569 CVE-2023-50383 · GHSA-6f22-c225-fcxm

OS command injection in LevelOne WBR-6013

HIGH 67

Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01929 Published 2024-07-08 No fix listed CWE-78

TI-2023-27568 CVE-2023-50382 · GHSA-qjm7-3fx4-3hf8

OS command injection in LevelOne WBR-6013

HIGH 67

Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01929 Published 2024-07-08 No fix listed CWE-78

TI-2023-27567 CVE-2023-50381 · GHSA-2rg9-mqj3-xwq5

OS command injection in LevelOne WBR-6013

HIGH 67

Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03195 Published 2024-07-08 No fix listed CWE-78

TI-2023-27528 CVE-2023-50330 · GHSA-3jrg-7968-639r

Stack-based buffer overflow in LevelOne WBR-6013

LOW 36

A stack-based buffer overflow vulnerability exists in the boa getInfo functionality of Realtek rtl819x Jungle SDK v3.4.11.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01101 Published 2024-07-08 No fix listed CWE-121

TI-2023-27269 CVE-2023-49867 · GHSA-v693-ww24-qwmw

Stack-based buffer overflow in LevelOne WBR-6013

HIGH 67

A stack-based buffer overflow vulnerability exists in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01101 Published 2024-07-08 No fix listed CWE-121

TI-2021-14190 CVE-2021-35392 · GHSA-93h2-q35g-wr7p

Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server…

HIGH 73

Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.82104 Published 2021-08-16 No fix listed CWE-787

TI-2021-14191 CVE-2021-35393 · GHSA-m5f8-mpp8-9vp4

Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server…

HIGH 78

Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.66387 Published 2021-08-16 No fix listed CWE-787

TI-2021-14192 CVE-2021-35394 · GHSA-9q9f-f28q-83xj

Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP…

CRITICAL 100KEV

Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99873 Published 2021-08-16 No fix listed CWE-78

TI-2021-14193 CVE-2021-35395 · GHSA-qrv5-8v43-rrgf

Realtek Jungle SDK version v2.x up to v3.4.14B provides an HTTP web server exposing a…

CRITICAL 100KEV

Realtek Jungle SDK version v2.x up to v3.4.14B provides an HTTP web server exposing a management interface that can be used to configure the access point.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.981 Published 2021-08-16 No fix listed

Vulnerabilities

Filters