What’s Vulnerable › Vulnerabilities

CVE-2014-8361: Realtek SDK Improper Input Validation Vulnerability

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: yes — in CISA KEV since 2023-09-18
• EPSS: 100.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2015-05-01 · updated 2026-06-17

Description

The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.

Affected products

• Aterm W1200Ex-Ms Firmware: through 1.3.1
• Aterm W1200Ex Firmware: through 1.3.1
• Aterm W300P Firmware: all versions
• Aterm W500P Firmware: all versions
• Aterm Wf300Hp2 Firmware: all versions
• Aterm Wf800Hp Firmware: all versions
• Aterm Wg1200Hp2 Firmware: through 2.5.0
• Aterm Wg1200Hp3 Firmware: through 1.3.1
• Aterm Wg1200Hp Firmware: all versions
• Aterm Wg1200Hs2 Firmware: through 2.5.0
• Aterm Wg1200Hs Firmware: all versions
• Aterm Wg1800Hp3 Firmware: through 1.5.1
• Aterm Wg1800Hp4 Firmware: through 1.3.1
• Aterm Wg1900Hp2 Firmware: through 1.3.1
• Aterm Wg1900Hp Firmware: through 2.5.1
• Aterm Wr8165N Firmware: all versions
• Dlink Dir-501 Firmware: through 1.01b04
• Dlink Dir-515 Firmware: through 1.01b04
• D-Link DIR-600L: through 1.15; through 2.056b06
• D-Link DIR-605L: through 1.14b06; through 2.07b02; through 3.03b07
• D-Link DIR-615: through 6.06b03; 10.01b02
• D-Link DIR-619L: through 1.15; through 2.07b02
• Dlink Dir-809 Firmware: through 1.04b02
• Dlink Dir-900L Firmware: before 1.15b01 — fixed in 1.15b01
• Dlink Dir-905L Firmware: through 2.05b01
• Realtek Sdk: all versions

How to fix

Upgrade to a fixed version: Dlink Dir-900L Firmware 1.15b01. Check the vendor advisory for mitigations.

References

• http://jvn.jp/en/jp/JVN47580234/index.html
• http://jvn.jp/en/jp/JVN67456944/index.html
• http://packetstormsecurity.com/files/132090/Realtek-SDK-Miniigd-UPnP-SOAP-Command-Execution.html
• http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055
• http://www.securityfocus.com/bid/74330
• http://www.zerodayinitiative.com/advisories/ZDI-15-155/
• https://sensorstechforum.com/hinatabot-cve-2014-8361-ddos/
• https://web.archive.org/web/20150909230440/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055
• https://www.exploit-db.com/exploits/37169/
• http://jvn.jp/en/jp/JVN47580234/index.html
• http://jvn.jp/en/jp/JVN67456944/index.html
• http://packetstormsecurity.com/files/132090/Realtek-SDK-Miniigd-UPnP-SOAP-Command-Execution.html

Get alerted when CVE-2014-8361 or the next vulnerability affects your stack