[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fz3zmLpYOiysmw9lKOBMoJ_EesJHYmBnSToLa1RzLjDM":3,"g5a-family:realtek\u002Frtl819x_jungle_software_development_kit":105,"g5a-ex:realtek\u002Frtl819x_jungle_software_development_kit@*":106},{"success":4,"data":5},true,{"product":6,"versions":24,"topVulnerabilitiesByEpss":28,"kevVulnerabilities":73,"seoMetadata":83,"meta":102},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":23},"realtek","rtl819x_jungle_software_development_kit",3,23,2,"2024-07-08",[14,18,21],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"2.0",0,false,{"version":19,"cve_count":20,"kev_count":16,"has_kev":17},"3.4.11",19,{"version":22,"cve_count":16,"kev_count":16,"has_kev":17},"3.4.14b","Rtl819x Jungle Software Development Kit by Realtek is a technology product with 3 tracked versions and 23 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[25,26,27],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":20,"kev_count":16,"has_kev":17},{"version":22,"cve_count":16,"kev_count":16,"has_kev":17},[29,37,41,47,51,56,60,63,67,70],{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"cvssVersion":34,"severity":35,"isKev":4,"epssScore":36},"CVE-2021-35394","Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary. The binary is affected by multiple memory corruption vulnerabilities and an arbitrary command injection vulnerability that can be exploited by remote unauthenticated attackers.","2021-08-16",9.8,"v3.1","Critical",0.99877,{"cveId":38,"description":39,"publishedDate":32,"cvssScore":33,"cvssVersion":34,"severity":35,"isKev":4,"epssScore":40},"CVE-2021-35395","Realtek Jungle SDK version v2.x up to v3.4.14B provides an HTTP web server exposing a management interface that can be used to configure the access point. Two versions of this management interface exists: one based on Go-Ahead named webs and another based on Boa named boa. Both of them are affected by these vulnerabilities. Specifically, these binaries are vulnerable to the following issues: - stack buffer overflow in formRebootCheck due to unsafe copy of submit-url parameter - stack buffer overflow in formWsc due to unsafe copy of submit-url parameter - stack buffer overflow in formWlanMultipleAP due to unsafe copy of submit-url parameter - stack buffer overflow in formWlSiteSurvey due to unsafe copy of ifname parameter - stack buffer overflow in formStaticDHCP due to unsafe copy of hostname parameter - stack buffer overflow in formWsc due to unsafe copy of 'peerPin' parameter - arbitrary command execution in formSysCmd via the sysCmd parameter - arbitrary command injection in formWsc via the 'peerPin' parameter Exploitability of identified issues will differ based on what the end vendor\u002Fmanufacturer did with the Realtek SDK webserver. Some vendors use it as-is, others add their own authentication implementation, some kept all the features from the server, some remove some of them, some inserted their own set of features. However, given that Realtek SDK implementation is full of insecure calls and that developers tends to re-use those examples in their custom code, any binary based on Realtek SDK webserver will probably contains its own set of issues on top of the Realtek ones (if kept). Successful exploitation of these issues allows remote attackers to gain arbitrary code execution on the device.",0.981,{"cveId":42,"description":43,"publishedDate":32,"cvssScore":44,"cvssVersion":34,"severity":45,"isKev":17,"epssScore":46},"CVE-2021-35392","Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols. The binary is usually named wscd or mini_upnpd and is the successor to miniigd. The server is vulnerable to a heap buffer overflow that is present due to unsafe crafting of SSDP NOTIFY messages from received M-SEARCH messages ST header.",7.5,"High",0.8315,{"cveId":48,"description":49,"publishedDate":32,"cvssScore":33,"cvssVersion":34,"severity":35,"isKev":17,"epssScore":50},"CVE-2021-35393","Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols. The binary is usually named wscd or mini_upnpd and is the successor to miniigd. The server is vulnerable to a stack buffer overflow vulnerability that is present due to unsafe parsing of the UPnP SUBSCRIBE\u002FUNSUBSCRIBE Callback header. Successful exploitation of this vulnerability allows remote unauthenticated attackers to gain arbitrary code execution on the affected device.",0.68298,{"cveId":52,"description":53,"publishedDate":12,"cvssScore":54,"cvssVersion":34,"severity":45,"isKev":17,"epssScore":55},"CVE-2023-50381","Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This command injection is related to the `targetAPSsid` request's parameter.",7.2,0.03195,{"cveId":57,"description":58,"publishedDate":12,"cvssScore":54,"cvssVersion":34,"severity":45,"isKev":17,"epssScore":59},"CVE-2023-50382","Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This command injection is related to the `peerPin` request's parameter.",0.01929,{"cveId":61,"description":62,"publishedDate":12,"cvssScore":54,"cvssVersion":34,"severity":45,"isKev":17,"epssScore":59},"CVE-2023-50383","Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This command injection is related to the `localPin` request's parameter.",{"cveId":64,"description":65,"publishedDate":12,"cvssScore":54,"cvssVersion":34,"severity":45,"isKev":17,"epssScore":66},"CVE-2023-50239","Two stack-based buffer overflow vulnerabilities exist in the boa set_RadvdInterfaceParam functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This stack-based buffer overflow is related to the `interfacename` request's parameter.",0.01413,{"cveId":68,"description":69,"publishedDate":12,"cvssScore":54,"cvssVersion":34,"severity":45,"isKev":17,"epssScore":66},"CVE-2023-50244","Two stack-based buffer overflow vulnerabilities exist in the boa formIpQoS functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This stack-based buffer overflow is related to the `entry_name` request's parameter.",{"cveId":71,"description":72,"publishedDate":12,"cvssScore":54,"cvssVersion":34,"severity":45,"isKev":17,"epssScore":66},"CVE-2023-47856","A stack-based buffer overflow vulnerability exists in the boa set_RadvdPrefixParam functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.",[74,79],{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"severity":35,"isKev":4,"epssScore":36,"cisaVulnName":75,"cisaDateAdded":76,"cisaShortDescription":77,"cisaRequiredAction":78},"Realtek Jungle SDK Remote Code Execution Vulnerability","2021-12-10","RealTek Jungle SDK contains multiple memory corruption vulnerabilities which can allow an attacker to perform remote code execution.","Apply updates per vendor instructions.",{"cveId":38,"description":39,"publishedDate":32,"cvssScore":33,"severity":35,"isKev":4,"epssScore":40,"cisaVulnName":80,"cisaDateAdded":81,"cisaShortDescription":82,"cisaRequiredAction":78},"Realtek AP-Router SDK Buffer Overflow Vulnerability","2021-11-03","Realtek AP-Router SDK HTTP web server boa contains a buffer overflow vulnerability due to unsafe copies of some overly long parameters submitted in the form that lead to denial-of-service (DoS).",{"title":84,"metaDescription":85,"keywords":86,"structuredData":87},"Rtl819x Jungle Software Development Kit by Realtek - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Rtl819x Jungle Software Development Kit by Realtek covering 3 versions with 23 tracked vulnerabilities including 2 critical and 0 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Rtl819x Jungle Software Development Kit vulnerabilities, Rtl819x Jungle Software Development Kit security, Rtl819x Jungle Software Development Kit CVE, Realtek Rtl819x Jungle Software Development Kit, Rtl819x Jungle Software Development Kit threat intelligence, Realtek security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Rtl819x Jungle Software Development Kit KEV, Rtl819x Jungle Software Development Kit exploited vulnerabilities",{"@context":88,"@type":89,"name":90,"description":85,"url":91,"manufacturer":92,"applicationCategory":96,"softwareVersion":97,"mainEntity":98},"https:\u002F\u002Fschema.org","SoftwareApplication","Rtl819x Jungle Software Development Kit","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Frealtek\u002Frtl819x_jungle_software_development_kit",{"@type":93,"name":94,"url":95},"Organization","Realtek","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Frealtek","Security Software","3 versions tracked",{"@type":99,"name":100,"description":101,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Rtl819x Jungle Software Development Kit Security Vulnerabilities","Security vulnerabilities affecting Rtl819x Jungle Software Development Kit by Realtek",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":103,"apiVersion":104},"2026-10-17T20:40:31.125Z","3.0",[],{"rows":107,"total":11,"capped":17,"failed":16},[108,113],{"cveId":30,"name":75,"severity":35,"cvss":33,"added":76,"epss":36,"published":109,"ranges":110,"checked":4,"hits":112,"covers":17},"2021-08-16T12:15:07.267",[111],"2.0 to 3.4.14b",[],{"cveId":38,"name":80,"severity":35,"cvss":33,"added":81,"epss":40,"published":114,"ranges":115,"checked":4,"hits":116,"covers":17},"2021-08-16T12:15:07.3",[111],[]]