CVE-2014-8361
En bref Sévérité CRITICAL 9.8 Exploitation Exploitation connue (CISA KEV) · ajoutée le 2023-09-18 Exploitée selon l'ENISA depuis le 2023-09-18 EPSS EPSS 99.97 % · centile 100 (2026-10-27) État PUBLISHED Publiée 2015-05-01 Mise à jour 2025-10-21 Attribuée par mitre Statut NVD Analyzed Description The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.
Scores Version Score Vecteur Évalué par CVSS 3.1 CRITICAL 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CISA-ADP CVSS 3.1 CRITICAL 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H NVD · nvd@nist.gov (Primary) CVSS 3.1 CRITICAL 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H NVD · 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary) CVSS 2.0 HIGH 10.0 AV:N/AC:L/Au:N/C:C/I:C/A:C NVD · nvd@nist.gov (Primary)
Références européennes
Configurations affectées (CPE NVD) cpe:2.3:o:dlink:dir-905l_firmware:*:*:*:*:*:*:*:* ≤ 2.05b01cpe:2.3:o:dlink:dir-605l_firmware:*:*:*:*:*:*:*:* ≤ 1.14b06cpe:2.3:o:dlink:dir-600l_firmware:*:*:*:*:*:*:*:* ≤ 1.15cpe:2.3:o:dlink:dir-619l_firmware:*:*:*:*:*:*:*:* ≤ 1.15cpe:2.3:o:dlink:dir-619l_firmware:*:*:*:*:*:*:*:* ≤ 2.07b02cpe:2.3:o:dlink:dir-605l_firmware:*:*:*:*:*:*:*:* ≤ 2.07b02cpe:2.3:o:dlink:dir-605l_firmware:*:*:*:*:*:*:*:* ≤ 3.03b07cpe:2.3:o:dlink:dir-600l_firmware:*:*:*:*:*:*:*:* ≤ 2.056b06cpe:2.3:o:dlink:dir-809_firmware:*:*:*:*:*:*:*:* ≤ 1.04b02cpe:2.3:o:dlink:dir-900l_firmware:*:*:*:*:*:*:*:* < 1.15b01cpe:2.3:a:realtek:realtek_sdk:-:*:*:*:*:*:*:*cpe:2.3:o:dlink:dir-501_firmware:*:*:*:*:*:*:*:* ≤ 1.01b04cpe:2.3:o:dlink:dir-515_firmware:*:*:*:*:*:*:*:* ≤ 1.01b04cpe:2.3:o:dlink:dir-615_firmware:10.01b02:*:*:*:*:*:*:*cpe:2.3:o:dlink:dir-615_firmware:*:*:*:*:*:*:*:* ≤ 6.06b03cpe:2.3:o:aterm:wg1900hp2_firmware:*:*:*:*:*:*:*:* ≤ 1.3.1cpe:2.3:o:aterm:wg1900hp_firmware:*:*:*:*:*:*:*:* ≤ 2.5.1cpe:2.3:o:aterm:wg1800hp4_firmware:*:*:*:*:*:*:*:* ≤ 1.3.1cpe:2.3:o:aterm:wg1800hp3_firmware:*:*:*:*:*:*:*:* ≤ 1.5.1cpe:2.3:o:aterm:wg1200hs2_firmware:*:*:*:*:*:*:*:* ≤ 2.5.0cpe:2.3:o:aterm:wg1200hp3_firmware:*:*:*:*:*:*:*:* ≤ 1.3.1cpe:2.3:o:aterm:wg1200hp2_firmware:*:*:*:*:*:*:*:* ≤ 2.5.0cpe:2.3:o:aterm:w1200ex_firmware:*:*:*:*:*:*:*:* ≤ 1.3.1cpe:2.3:o:aterm:w1200ex-ms_firmware:*:*:*:*:*:*:*:* ≤ 1.3.1cpe:2.3:o:aterm:wg1200hs_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:aterm:wg1200hp_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:aterm:wf800hp_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:aterm:wf300hp2_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:aterm:wr8165n_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:aterm:w500p_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:aterm:w300p_firmware:*:*:*:*:*:*:*:*Produits affectés Produit Versions affected n/a
Références
Sources
