realtek realtek sdk - vulnerabilities and exploits

(subscribe to this query)

9.8

CVSSv3

Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary. The binary is affected by multiple memory corruption vulnerabilities and an arbitrary command injection vulnerability t...

Realtek Realtek Jungle Sdk

9.8

CVSSv3

Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols. The binary is usually named wscd or mini_upnpd and is the successor to miniigd. The server is vulnerable to a stack buffer overflow vulner...

Realtek Realtek Jungle Sdk

1 Github repository

9.8

CVSSv3

Realtek Jungle SDK version v2.x up to v3.4.14B provides an HTTP web server exposing a management interface that can be used to configure the access point. Two versions of this management interface exists: one based on Go-Ahead named webs and another based on Boa named boa. Both o...

Realtek Realtek Jungle Sdk

1 Article

7.5

CVSSv3

Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols. The binary is usually named wscd or mini_upnpd and is the successor to miniigd. The server is vulnerable to a heap buffer overflow that is...

Realtek Jungle Sdk

NA

The miniigd SOAP service in Realtek SDK allows remote malicious users to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild up to and including 2023.

Dlink Dir-905l Firmware Dlink Dir-605l Firmware Dlink Dir-600l Firmware Realtek Realtek Sdk -Dlink Dir-619l Firmware Dlink Dir-809 Firmware

1 EDB exploit1 Github repository1 Article

6.5

CVSSv3

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for broadcast network packet length. An unauthenticated attacker in the adjacent network can exploit this vulnerability to disrupt service.

Realtek Bluetooth Mesh Software Development Kit

6.5

CVSSv3

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for segmented packets’ link parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and disrupt service...

Realtek Bluetooth Mesh Software Development Kit

6.5

CVSSv3

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the size of segmented packets’ reference parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow an...

Realtek Bluetooth Mesh Software Development Kit

6.5

CVSSv3

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the length of segmented packets’ shift parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and ...

Realtek Bluetooth Mesh Software Development Kit

7.5

CVSSv3

In ambiot amb1_sdk (aka SDK for Ameba1) prior to 2022-06-20 on Realtek RTL8195AM devices prior to 284241d70308ff2519e40afd7b284ba892c730a3, the timer task and RX task would be locked when there are frequent and continuous Wi-Fi connection (with four-way handshake) failures in Sof...

Realtek Rtl8195am Firmware

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook