Actively exploited · Published May 1, 2015 · Assigned by mitre
CVE-2014-8361
Critical 9.8 Exploited
In plain English
A critical-severity security flaw in SDK from Realtek. Attackers are actively exploiting it in the wild (listed by CISA on September 18, 2023). The chance it is exploited in the next 30 days is estimated at 100.0% (higher than 99.9% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit, public proof-of-concept code. Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA guidance
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Federal agencies must remediate by Oct 9, 2023.
Official description
The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.
Affected products (as reported)
References
- http://www.zerodayinitiative.com/advisories/ZDI-15-155/
- http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055
- http://packetstormsecurity.com/files/132090/Realtek-SDK-Miniigd-UPnP-SOAP-Command-Execution.html
- 74330 vdb-entry
- 37169 exploit
- JVN#47580234 third-party-advisory
- JVN#67456944 third-party-advisory
- https://sensorstechforum.com/hinatabot-cve-2014-8361-ddos/
- https://web.archive.org/web/20150909230440/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-8361 government-resource