PT-2014-2053 · Realtek · Realtek Sdk

Headlesszeke + 1 · Published 2014-08-13 · Updated 2025-12-01 · CVE-2014-8361

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Realtek SDK (affected versions not specified)

Description The issue is related to the miniigd SOAP service in Realtek SDK, which allows remote attackers to execute arbitrary code via a crafted NewInternalClient request. This has been exploited in the wild through 2023. The vulnerability is associated with insufficient input validation, allowing an attacker to execute arbitrary code using specially formed requests.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2023-02015

CVE-2014-8361

ZDI-15-155

Affected Products

Realtek Sdk

References · 42

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/dlink_upnp_exec_noauth.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/realtek_miniigd_upnp_exec_noauth.rb · Exploit
• 🔥 https://exploit-db.com/exploits/37169 · Exploit
• http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-8361 · Security Note
• https://web.archive.org/web/20150831100501/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-15-155 · Security Note
• https://bdu.fstec.ru/vul/2023-02015 · Security Note
• http://jvn.jp/en/jp/JVN67456944/index.html · Note
• https://t.me/cvenotify/116414 · Telegram Post
• https://t.me/aptreports/15229 · Telegram Post
• https://t.me/true_secator/6153 · Telegram Post
• https://t.me/aptreports/24113 · Telegram Post
• https://reddit.com/r/pwnhub/comments/1j2onju/cybersecurity_alert_attackers_automating_exploits · Reddit Post
• https://t.me/aptreports/14056 · Telegram Post