Lucene search
TalosCVELIST:CVE-2023-34435HistoryJul 08, 2024 - 3:25 p.m.
CVE-2023-34435
2024-07-0815:25:39
CWE-347
talos
www.cve.org
7
firmware update
realtek rtl819x
jungle sdk
network packets
arbitrary
vulnerability
malicious file
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
19.5%
A firmware update vulnerability exists in the boa formUpload functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted network packets can lead to arbitrary firmware update. An attacker can provide a malicious file to trigger this vulnerability.
CNA Affected
[
{
"vendor": "LevelOne",
"product": "WBR-6013",
"versions": [
{
"version": "RER4_A_v3411b_2T2R_LEV_09_170623",
"status": "affected"
}
]
},
{
"vendor": "Realtek",
"product": "rtl819x Jungle SDK",
"versions": [
{
"version": "v3.4.11",
"status": "affected"
}
]
}
]Related
vulnrichment
vulnrichment
CVE-2023-34435
2024-07-08 15:25:39
cve
cve
CVE-2023-34435
2024-07-08 16:15:02
talos
talos
Realtek rtl819x Jungle SDK boa formUpload firmware update vulnerability
2024-07-08 00:00:00
nvd
nvd
CVE-2023-34435
2024-07-08 16:15:02
talosblog
talosblog
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
19.5%
Related for CVELIST:CVE-2023-34435