CVE-2021-35395

Realtek AP-Router SDK Buffer Overflow Vulnerability

Rtl819X Jungle Software Development Kit

Realtek Jungle SDK version v2.x up to v3.4.14B provides an HTTP web server exposing a management interface that can be used to configure the access point. Two versions of this management interface exists: one based on Go-Ahead named webs and another based on Boa named boa. Both of them are affected by these vulnerabilities. Specifically, these binaries are vulnerable to the following issues: - stack buffer overflow in formRebootCheck due to unsafe copy of submit-url…

16. Aug 2021

Ausgewertete Quellen

• Hersteller
  https://www.realtek.com/en/cu-1-en/cu-1-taiwan-en
• Hinweis
  https://www.iot-inspector.com/blog/advisory-multiple-issues-realtek-sdk-iot-supply-chain
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-35395
• CISA
  Realtek AP-Router SDK Buffer Overflow Vulnerability
• NVD
  CVE-2021-35395