CVE-2014-8361
The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Analyzed - cve@mitre.org
- Published
- 2015-05-01
- Last modified
- 2025-10-21
- Known exploited (CISA KEV)
- since 2023-09-18, action due 2023-10-09: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Affected products
- W1200ex-ms Firmware (Aterm)
- W1200ex Firmware (Aterm)
- W300p Firmware (Aterm)
- W500p Firmware (Aterm)
- Wf300hp2 Firmware (Aterm)
- Wf800hp Firmware (Aterm)
- Wg1200hp2 Firmware (Aterm)
- Wg1200hp3 Firmware (Aterm)
- Wg1200hp Firmware (Aterm)
- Wg1200hs2 Firmware (Aterm)
- Wg1200hs Firmware (Aterm)
- Wg1800hp3 Firmware (Aterm)
- Wg1800hp4 Firmware (Aterm)
- Wg1900hp2 Firmware (Aterm)
- Wg1900hp Firmware (Aterm)
- Wr8165n Firmware (Aterm)
- Dir-501 Firmware (Dlink)
- Dir-515 Firmware (Dlink)
- Dir-600l Firmware (Dlink)
- Dir-605l Firmware (Dlink)
- Dir-615 Firmware (Dlink)
- Dir-619l Firmware (Dlink)
- Dir-809 Firmware (Dlink)
- Dir-900l Firmware (Dlink)
- Dir-905l Firmware (Dlink)
- Realtek Sdk (Realtek)
References
- http://jvn.jp/en/jp/JVN47580234/index.html
- http://jvn.jp/en/jp/JVN67456944/index.html
- http://packetstormsecurity.com/files/132090/Realtek-SDK-Miniigd-UPnP-SOAP-Command-Execution.html
- http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055
- http://www.securityfocus.com/bid/74330
- http://www.zerodayinitiative.com/advisories/ZDI-15-155/
- https://sensorstechforum.com/hinatabot-cve-2014-8361-ddos/
- https://web.archive.org/web/20150909230440/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055
- https://www.exploit-db.com/exploits/37169/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-8361
