login
quiescence.eu
Saltar al contenido

CVE-2014-8361

Realtek SDK Improper Input Validation Vulnerability

n/a
CVSS
100.0%
EPSS (exploit prob.)
100.0%
EPSS percentile
Yes
Actively exploited
No
Ransomware use
2023-09-18
Added

Summary

Realtek SDK contains an improper input validation vulnerability in the miniigd SOAP service that allows remote attackers to execute malicious code via a crafted NewInternalClient request.

Affected software

Vendor: Realtek  ·  Product: SDK

Weakness types (CWE):

CWE-20

What to do

This vulnerability appears in CISA's Known Exploited Vulnerabilities catalog, meaning it is being exploited in the wild. Prioritize patching affected systems and verify exposure across your estate.

Related vulnerabilities in Realtek

CVENameEPSSExploited
CVE-2021-35394 Realtek Jungle SDK Remote Code Execution Vulnerability 99.9% Yes
CVE-2021-35395 Realtek AP-Router SDK Buffer Overflow Vulnerability 98.0% Yes

Is your domain exposed?

Run a free, instant security report for any domain — exposure score, email auth, TLS and breach metadata.

Get your free report

All information is aggregated from public sources for awareness only and does not constitute an accusation or a security assessment. No personal data or credentials are published.