CVE-2014-8361VulnerabilityPublished 09/18/2023Updated 10/24/2026

CVE-2014-8361: Realtek SDK Improper Input Validation Vulnerability

Affects Realtek SDKSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 09/18/2023
KEV deadline: 10/09/2023
EPSS: 100.0% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

web.archive.org/web/20150831100501/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055 (opens in a new tab)
nvd.nist.gov/vuln/detail/CVE-2014-8361 (opens in a new tab)

Description

Realtek SDK contains an improper input validation vulnerability in the miniigd SOAP service that allows remote attackers to execute malicious code via a crafted NewInternalClient request.

Weaknesses

CWE-20Improper Input Validation (opens in a new tab)

References

web.archive.org/web/20150831100501/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055 (opens in a new tab)
nvd.nist.gov/vuln/detail/CVE-2014-8361 (opens in a new tab)
cisa.gov/known-exploited-vulnerabilities-catalog?search=CVE-2014-8361 (opens in a new tab)

What to do

Description

Weaknesses

References

Related threats