CVE-2023-41251

HIGH
MEDIUM Priority: 0.09 BB Relevance: 60/100
Published: 2024-07-08 Modified: 2026-11-03 First seen: 2026-11-03 Status: active

Attack Surface

Network Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: High
UI: None
S: Unchanged
C: High
I: High
A: High

Description

A stack-based buffer overflow vulnerability exists in the boa formRoute functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability.

Affected Software (6)

VendorProductVersion
LevelOne WBR-6013 RER4_A_v3411b_2T2R_LEV_09_170623
LevelOne WBR-6013 RER4_A_v3411b_2T2R_LEV_09_170623
Realtek rtl819x Jungle SDK v3.4.11
Realtek rtl819x Jungle SDK v3.4.11
level1 wbr-6013_firmware rer4_a_v3411b_2t2r_lev_09_170623
realtek rtl819x_jungle_software_development_kit 3.4.11

Bug Bounty Relevance

60 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

7.2 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

1.28%
Raw Score 0.012830
Percentile 70.5%
Date 2026-11-13

EPSS Trend

2026-11-13
0.01283
2026-11-12
0.01283
2026-11-10
0.01283
2026-11-09
0.01283
2026-11-08
0.01283
2026-11-07
0.01283
2026-11-06
0.01283
2026-11-05
0.01283
2026-11-04
0.01283
2026-11-03
0.01283

Intelligence Sources

mitre ref →
nvd ref →