High severity7.2NVD Advisory· Published Jul 8, 2024· Updated Jun 17, 2026

CVE-2023-50383

Description

Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This command injection is related to the localPin request's parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Realtek/Rtl819x Jungle Software Development Kit
cpe:2.3:a:realtek:rtl819x_jungle_software_development_kit:3.4.11:*:*:*:*:*:*:*
Level1/Wbr 6013 Firmware
cpe:2.3:o:level1:wbr-6013_firmware:rer4_a_v3411b_2t2r_lev_09_170623:*:*:*:*:*:*:*
Realtek/rtl819x Jungle SDKllm-fuzzy2 versions
<3.4.11+ 1 more
- (no CPE)range: <3.4.11
- (no CPE)range: v3.4.11
Level Platforms/Wbr 6012cpe-rescue
Range: RER4_A_v3411b_2T2R_LEV_09_170623

Patches

Vulnerability mechanics

References

talosintelligence.com/vulnerability_reports/TALOS-2023-1899nvdThird Party Advisory
www.talosintelligence.com/vulnerability_reports/TALOS-2023-1899nvd

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000