Approved changes feed: RSS · Atom

cpe:2.3:a:realtek:rtl819x_software_development_kit:3.4.11:*:*:*:*:*:*:*

part: a version: 3.4.11 update: *

VendorRealtek (9c8a6606-8769-5ca0-be4a-9f8922266f07)
ProductRtl819X Software Development Kit (238dbe41-d007-52fc-81a9-171c0c2132a4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-21778 vulnerable 2026-06-08 06:27:36.589084 Details available
HIGH (7.2)
A heap-based buffer overflow vulnerability exists in the configuration file mib_init_value_array functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted .dat file can lead to arbitrary code execution. An attacker can upload a malicious file to trigger this vulnerability.
Published: 2024-07-08T15:25:38.672Z
Updated: 2025-11-04T17:14:14.440Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50383 vulnerable 2026-06-08 06:16:16.087976 Details available
HIGH (7.2)
Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This command injection is related to the `localPin` request's parameter.
Published: 2024-07-08T15:22:23.701Z
Updated: 2025-11-04T17:13:34.217Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50382 vulnerable 2026-06-08 06:16:16.087397 Details available
HIGH (7.2)
Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This command injection is related to the `peerPin` request's parameter.
Published: 2024-07-08T15:22:23.599Z
Updated: 2025-11-04T17:13:32.830Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50381 vulnerable 2026-06-08 06:16:16.086531 Details available
HIGH (7.2)
Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This command injection is related to the `targetAPSsid` request's parameter.
Published: 2024-07-08T15:22:23.481Z
Updated: 2025-11-04T17:13:31.458Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50330 vulnerable 2026-06-08 06:16:15.955659 Details available
HIGH (7.2)
A stack-based buffer overflow vulnerability exists in the boa getInfo functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can send a series of HTTP requests to trigger this vulnerability.
Published: 2024-07-08T15:22:22.982Z
Updated: 2025-11-04T17:13:30.081Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50244 vulnerable 2026-06-08 06:16:15.727288 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50243 vulnerable 2026-06-08 06:16:15.726532 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50240 vulnerable 2026-06-08 06:16:15.725838 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50239 vulnerable 2026-06-08 06:16:15.725210 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49867 vulnerable 2026-06-08 06:16:10.661139 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49595 vulnerable 2026-06-08 06:14:29.230739 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49073 vulnerable 2026-06-08 06:14:28.380906 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48270 vulnerable 2026-06-08 06:14:26.777464 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47856 vulnerable 2026-06-08 06:14:25.867659 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47677 vulnerable 2026-06-08 06:14:25.364646 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46685 vulnerable 2026-06-08 06:14:22.752231 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45742 vulnerable 2026-06-08 06:12:43.195447 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45215 vulnerable 2026-06-08 06:12:42.298730 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41251 vulnerable 2026-06-08 06:11:05.639265 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34435 vulnerable 2026-06-08 06:06:25.583420 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.