CVE-2014-8361

9.8 CRITICAL CISA KEV - Actively Exploited

Published: May 01, 2015 Modified: October 22, 2025

Description

The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://jvn.jp/en/jp/JVN47580234/index.html

Source: cve@mitre.org

Third Party Advisory

http://jvn.jp/en/jp/JVN67456944/index.html

Source: cve@mitre.org

Third Party Advisory

http://packetstormsecurity.com/files/132090/Realtek-SDK-Miniigd-UPnP-SOAP-Command-Execution.html

Source: cve@mitre.org

Third Party Advisory VDB Entry

http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/74330

Source: cve@mitre.org

Broken Link Third Party Advisory VDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-15-155/

Source: cve@mitre.org

Third Party Advisory VDB Entry

https://sensorstechforum.com/hinatabot-cve-2014-8361-ddos/

Source: cve@mitre.org

Third Party Advisory

https://web.archive.org/web/20150909230440/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055

Source: cve@mitre.org

Third Party Advisory

https://www.exploit-db.com/exploits/37169/

Source: cve@mitre.org

Third Party Advisory VDB Entry

http://jvn.jp/en/jp/JVN47580234/index.html