PT-2021-3802 · Realtek · Realtek Jungle Sdk

Published 2021-08-15 · Updated 2026-03-10 · CVE-2021-35394

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Realtek Jungle SDK versions v2.x through v3.4.14B

Description The Realtek Jungle SDK provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary. This binary is affected by multiple memory corruption vulnerabilities and an arbitrary command injection vulnerability. These vulnerabilities can be exploited by remote unauthenticated attackers, potentially allowing them to execute arbitrary code.

Recommendations For Realtek Jungle SDK versions v2.x through v3.4.14B, consider disabling the 'MP Daemon' tool or restricting access to the 'UDPServer' binary until a patch is available. Additionally, restrict access to the vulnerable UDPServer binary to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

OS Command Injection

Weakness Enumeration

CWE-119

CWE-78

Related Identifiers

BDU:2021-04077

CVE-2021-35394

Affected Products

Realtek Jungle Sdk

References · 23

• 🔥 https://iot-inspector.com/blog/advisory-multiple-issues-realtek-sdk-iot-supply-chain · Exploit
• https://osv.dev/vulnerability/CVE-2021-35394 · Vendor Advisory
• https://realtek.com/images/safe-report/Realtek_APRouter_SDK_Advisory-CVE-2021-35392_35395.pdf · Vendor Advisory
• https://realtek.com/en/cu-1-en/cu-1-taiwan-en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-35394 · Security Note
• https://bdu.fstec.ru/vul/2021-04077 · Security Note
• https://twitter.com/ngar1866/status/1772315797106356676 · Twitter Post
• https://t.me/cibsecurity/27375 · Telegram Post
• https://t.me/aptreports/15229 · Telegram Post
• https://t.me/true_secator/3984 · Telegram Post
• https://t.me/cveNotify/132065 · Telegram Post
• https://t.me/aptreports/3341 · Telegram Post
• https://anti-malware.ru/news/2021-08-16-111332/36688 · Note
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-35394 · Note
• https://t.me/cybersecuritytechnologies/4088 · Telegram Post