CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2014-8361
The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.
Severity
- EPSS
- 100% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
- CISA KEV
- listed 2023-09-18, due 2023-10-09
- Published
- Modified
- Record from
- the NVD, synced
Affected
- aterm:w1200ex-ms_firmware
- aterm:w1200ex_firmware
- aterm:w300p_firmware
- aterm:w500p_firmware
- aterm:wf300hp2_firmware
- aterm:wf800hp_firmware
- aterm:wg1200hp2_firmware
- aterm:wg1200hp3_firmware
- aterm:wg1200hp_firmware
- aterm:wg1200hs2_firmware
- aterm:wg1200hs_firmware
- aterm:wg1800hp3_firmware
- aterm:wg1800hp4_firmware
- aterm:wg1900hp2_firmware
- aterm:wg1900hp_firmware
- aterm:wr8165n_firmware
- dlink:dir-501_firmware
- dlink:dir-515_firmware
- dlink:dir-600l_firmware
- dlink:dir-605l_firmware
- dlink:dir-615_firmware
- dlink:dir-619l_firmware
- dlink:dir-809_firmware
- dlink:dir-900l_firmware
- dlink:dir-905l_firmware
- realtek:realtek_sdk