CVE-2014-8361
At a glance Severity CRITICAL 9.8 Exploitation Known exploited (CISA KEV) · added 2023-09-18 Exploited per ENISA since 2023-09-18 EPSS EPSS 99.97 % · percentile 100 (2026-10-27) State PUBLISHED Published 2015-05-01 Updated 2025-10-21 Assigner mitre NVD status Analyzed Description The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.
Scores Version Score Vector Scored by CVSS 3.1 CRITICAL 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CISA-ADP CVSS 3.1 CRITICAL 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H NVD · nvd@nist.gov (Primary) CVSS 3.1 CRITICAL 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H NVD · 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary) CVSS 2.0 HIGH 10.0 AV:N/AC:L/Au:N/C:C/I:C/A:C NVD · nvd@nist.gov (Primary)
European references
Affected configurations (NVD CPE) cpe:2.3:o:dlink:dir-905l_firmware:*:*:*:*:*:*:*:* ≤ 2.05b01cpe:2.3:o:dlink:dir-605l_firmware:*:*:*:*:*:*:*:* ≤ 1.14b06cpe:2.3:o:dlink:dir-600l_firmware:*:*:*:*:*:*:*:* ≤ 1.15cpe:2.3:o:dlink:dir-619l_firmware:*:*:*:*:*:*:*:* ≤ 1.15cpe:2.3:o:dlink:dir-619l_firmware:*:*:*:*:*:*:*:* ≤ 2.07b02cpe:2.3:o:dlink:dir-605l_firmware:*:*:*:*:*:*:*:* ≤ 2.07b02cpe:2.3:o:dlink:dir-605l_firmware:*:*:*:*:*:*:*:* ≤ 3.03b07cpe:2.3:o:dlink:dir-600l_firmware:*:*:*:*:*:*:*:* ≤ 2.056b06cpe:2.3:o:dlink:dir-809_firmware:*:*:*:*:*:*:*:* ≤ 1.04b02cpe:2.3:o:dlink:dir-900l_firmware:*:*:*:*:*:*:*:* < 1.15b01cpe:2.3:a:realtek:realtek_sdk:-:*:*:*:*:*:*:*cpe:2.3:o:dlink:dir-501_firmware:*:*:*:*:*:*:*:* ≤ 1.01b04cpe:2.3:o:dlink:dir-515_firmware:*:*:*:*:*:*:*:* ≤ 1.01b04cpe:2.3:o:dlink:dir-615_firmware:10.01b02:*:*:*:*:*:*:*cpe:2.3:o:dlink:dir-615_firmware:*:*:*:*:*:*:*:* ≤ 6.06b03cpe:2.3:o:aterm:wg1900hp2_firmware:*:*:*:*:*:*:*:* ≤ 1.3.1cpe:2.3:o:aterm:wg1900hp_firmware:*:*:*:*:*:*:*:* ≤ 2.5.1cpe:2.3:o:aterm:wg1800hp4_firmware:*:*:*:*:*:*:*:* ≤ 1.3.1cpe:2.3:o:aterm:wg1800hp3_firmware:*:*:*:*:*:*:*:* ≤ 1.5.1cpe:2.3:o:aterm:wg1200hs2_firmware:*:*:*:*:*:*:*:* ≤ 2.5.0cpe:2.3:o:aterm:wg1200hp3_firmware:*:*:*:*:*:*:*:* ≤ 1.3.1cpe:2.3:o:aterm:wg1200hp2_firmware:*:*:*:*:*:*:*:* ≤ 2.5.0cpe:2.3:o:aterm:w1200ex_firmware:*:*:*:*:*:*:*:* ≤ 1.3.1cpe:2.3:o:aterm:w1200ex-ms_firmware:*:*:*:*:*:*:*:* ≤ 1.3.1cpe:2.3:o:aterm:wg1200hs_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:aterm:wg1200hp_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:aterm:wf800hp_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:aterm:wf300hp2_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:aterm:wr8165n_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:aterm:w500p_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:aterm:w300p_firmware:*:*:*:*:*:*:*:*Affected products Product Versions affected n/a
References
Sources
