10

CVE-2014-8361

Warnung
Medienbericht
The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dlink ≫ Dir-905l Firmware Version <= 2.05b01
   Dlink ≫ Dir-905l Version a1
   Dlink ≫ Dir-905l Version b1
Dlink ≫ Dir-605l Firmware Version <= 1.14b06
   Dlink ≫ Dir-605l Version a1
Dlink ≫ Dir-600l Firmware Version <= 1.15
   Dlink ≫ Dir-600l Version a1
Dlink ≫ Dir-619l Firmware Version <= 1.15
   Dlink ≫ Dir-619l Version a1
Dlink ≫ Dir-619l Firmware Version <= 2.07b02
   Dlink ≫ Dir-619l Version b1
Dlink ≫ Dir-605l Firmware Version <= 2.07b02
   Dlink ≫ Dir-605l Version b1
Dlink ≫ Dir-605l Firmware Version <= 3.03b07
   Dlink ≫ Dir-605l Version c1
Dlink ≫ Dir-600l Firmware Version <= 2.056b06
   Dlink ≫ Dir-600l Version b1
Dlink ≫ Dir-809 Firmware Version <= 1.04b02
   Dlink ≫ Dir-809 Version a1
   Dlink ≫ Dir-809 Version a2
Dlink ≫ Dir-900l Firmware Version < 1.15b01
   Dlink ≫ Dir-900l Version a1
Realtek ≫ Realtek Sdk Version -
Dlink ≫ Dir-501 Firmware Version <= 1.01b04
   Dlink ≫ Dir-501 Version a1
Dlink ≫ Dir-515 Firmware Version <= 1.01b04
   Dlink ≫ Dir-515 Version a1
Dlink ≫ Dir-615 Firmware Version 10.01b02
   Dlink ≫ Dir-615 Version j1
Dlink ≫ Dir-615 Firmware Version <= 6.06b03
   Dlink ≫ Dir-615 Version fx
Aterm ≫ Wg1900hp2 Firmware Version <= 1.3.1
   Aterm ≫ Wg1900hp2 Version -
Aterm ≫ Wg1900hp Firmware Version <= 2.5.1
   Aterm ≫ Wg1900hp Version -
Aterm ≫ Wg1800hp4 Firmware Version <= 1.3.1
   Aterm ≫ Wg1800hp4 Version -
Aterm ≫ Wg1800hp3 Firmware Version <= 1.5.1
   Aterm ≫ Wg1800hp3 Version -
Aterm ≫ Wg1200hs2 Firmware Version <= 2.5.0
   Aterm ≫ Wg1200hs2 Version -
Aterm ≫ Wg1200hp3 Firmware Version <= 1.3.1
   Aterm ≫ Wg1200hp3 Version -
Aterm ≫ Wg1200hp2 Firmware Version <= 2.5.0
   Aterm ≫ Wg1200hp2 Version -
Aterm ≫ W1200ex Firmware Version <= 1.3.1
   Aterm ≫ W1200ex Version -
Aterm ≫ W1200ex-ms Firmware Version <= 1.3.1
   Aterm ≫ W1200ex-ms Version -
Aterm ≫ Wg1200hs Firmware
   Aterm ≫ Wg1200hs Version -
Aterm ≫ Wg1200hp Firmware
   Aterm ≫ Wg1200hp Version -
Aterm ≫ Wf800hp Firmware
   Aterm ≫ Wf800hp Version -
Aterm ≫ Wf300hp2 Firmware
   Aterm ≫ Wf300hp2 Version -
Aterm ≫ Wr8165n Firmware
   Aterm ≫ Wr8165n Version -
Aterm ≫ W500p Firmware
   Aterm ≫ W500p Version -
Aterm ≫ W300p Firmware
   Aterm ≫ W300p Version -

18.09.2023: CISA Known Exploited Vulnerabilities (KEV) Catalog

Realtek SDK Improper Input Validation Vulnerability

Schwachstelle

Realtek SDK contains an improper input validation vulnerability in the miniigd SOAP service that allows remote attackers to execute malicious code via a crafted NewInternalClient request.

Beschreibung

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 99.98% 1
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CISA-ADP 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
05.10.2026 15:28
http://jvn.jp/en/jp/JVN47580234/index.html
Third Party Advisory
http://jvn.jp/en/jp/JVN67456944/index.html
Third Party Advisory
http://packetstormsecurity.com/files/132090/Realtek-SDK-Miniigd-UPnP-SOAP-Command-Execution.html
Third Party Advisory
VDB Entry
http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055
Vendor Advisory
http://www.securityfocus.com/bid/74330
Third Party Advisory
Broken Link
VDB Entry
http://www.zerodayinitiative.com/advisories/ZDI-15-155/
Third Party Advisory
VDB Entry
https://sensorstechforum.com/hinatabot-cve-2014-8361-ddos/
Third Party Advisory
https://web.archive.org/web/20150909230440/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055
Third Party Advisory
https://www.exploit-db.com/exploits/37169/
Third Party Advisory
VDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-8361
US Government Resource