logo

CVE-2014-8361 - Realtek SDK Improper Input Validation Vulnerability

CVE-2014-8361

Realtek | SDK

  • Date Added:
  • 2023-09-18
  • Due Date:
  • 2023-10-09
Vulnerability Name

Realtek SDK Improper Input Validation Vulnerability

Description

Realtek SDK contains an improper input validation vulnerability in the miniigd SOAP service that allows remote attackers to execute malicious code via a crafted NewInternalClient request.

Known To Be Used in Ransomware Campaigns?

Unknown

Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Additional Notes
https://web.archive.org/web/20150831100501/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055; https://nvd.nist.gov/vuln/detail/CVE-2014-8361