PT-2014-2053 · Realtek · Realtek Sdk

Headlesszeke + 1 · Publicado 2014-08-13 · Atualizado 2025-12-01 · CVE-2014-8361

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Realtek SDK (affected versions not specified)

Description The issue is related to the miniigd SOAP service in Realtek SDK, which allows remote attackers to execute arbitrary code via a crafted NewInternalClient request. This has been exploited in the wild through 2023. The vulnerability is associated with insufficient input validation, allowing an attacker to execute arbitrary code using specially formed requests.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2023-02015

CVE-2014-8361

ZDI-15-155

Produtos afetados

Realtek Sdk

Referências · 42

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/dlink_upnp_exec_noauth.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/realtek_miniigd_upnp_exec_noauth.rb · Exploit
• 🔥 https://exploit-db.com/exploits/37169 · Exploit
• http://jvn.jp/en/jp/JVN67456944/index.html · Nota
• https://t.me/cvenotify/116414 · Publicação no Telegram
• https://t.me/aptreports/15229 · Publicação no Telegram
• https://t.me/true_secator/6153 · Publicação no Telegram
• https://t.me/aptreports/24113 · Publicação no Telegram
• https://reddit.com/r/pwnhub/comments/1j2onju/cybersecurity_alert_attackers_automating_exploits · Publicação no Reddit
• https://t.me/aptreports/14056 · Publicação no Telegram
• https://twitter.com/KevDataBase/status/1703807204728471732 · Publicação no Twitter
• http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055 · Aviso do Fabricante
• https://web.archive.org/web/20150909230440/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055 · Nota
• https://t.me/true_secator/4190 · Publicação no Telegram
• https://t.me/aptreports/2098 · Publicação no Telegram