CVEvulnerability

CVE-2014-8361

9.8 CRITICAL Known exploited Published 2015-05-01 Modified 2026-06-17 Official page ↗

CISA Known Exploited Vulnerability

Realtek SDK Improper Input Validation Vulnerability — Realtek SDK

Realtek SDK contains an improper input validation vulnerability in the miniigd SOAP service that allows remote attackers to execute malicious code via a crafted NewInternalClient request.

Added to KEV
2023-09-18
Remediation due
2023-10-09
Ransomware use
Unknown
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notes
https://web.archive.org/web/20150831100501/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055; https://nvd.nist.gov/vuln/detail/CVE-2014-8361
Status
Analyzed
Published
2015-05-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.

Affected configurations

• dlink dir-905l firmware (<= 2.05b01) • dlink dir-605l firmware (<= 1.14b06) • dlink dir-600l firmware (<= 1.15) • dlink dir-619l firmware (<= 1.15) • dlink dir-619l firmware (<= 2.07b02) • dlink dir-605l firmware (<= 2.07b02) • dlink dir-605l firmware (<= 3.03b07) • dlink dir-600l firmware (<= 2.056b06) • dlink dir-809 firmware (<= 1.04b02) • dlink dir-900l firmware (< 1.15b01) • realtek realtek sdk • dlink dir-501 firmware (<= 1.01b04) • dlink dir-515 firmware (<= 1.01b04) • dlink dir-615 firmware 10.01b02 • dlink dir-615 firmware (<= 6.06b03) • aterm wg1900hp2 firmware (<= 1.3.1) • aterm wg1900hp firmware (<= 2.5.1) • aterm wg1800hp4 firmware (<= 1.3.1) • aterm wg1800hp3 firmware (<= 1.5.1) • aterm wg1200hs2 firmware (<= 2.5.0) • aterm wg1200hp3 firmware (<= 1.3.1) • aterm wg1200hp2 firmware (<= 2.5.0) • aterm w1200ex firmware (<= 1.3.1) • aterm w1200ex-ms firmware (<= 1.3.1) • aterm wg1200hs firmware • aterm wg1200hp firmware • aterm wf800hp firmware • aterm wf300hp2 firmware • aterm wr8165n firmware • aterm w500p firmware • aterm w300p firmware

References