What’s Vulnerable › Vulnerabilities

CVE-2021-35394: Realtek Jungle SDK Remote Code Execution Vulnerability

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: yes — in CISA KEV since 2021-12-10
• EPSS: 99.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-08-16 · updated 2026-06-17
• Weakness: CWE-78

Description

Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary. The binary is affected by multiple memory corruption vulnerabilities and an arbitrary command injection vulnerability that can be exploited by remote unauthenticated attackers.

Affected products

• Realtek Rtl819X Jungle Software Development Kit: from 2.0 through 3.4.14b

References

• https://www.iot-inspector.com/blog/advisory-multiple-issues-realtek-sdk-iot-supply-chain
• https://www.realtek.com/en/cu-1-en/cu-1-taiwan-en
• https://www.realtek.com/images/safe-report/Realtek_APRouter_SDK_Advisory-CVE-2021-35392_35395.pdf
• https://www.securityfocus.com/archive/1/534765
• https://www.iot-inspector.com/blog/advisory-multiple-issues-realtek-sdk-iot-supply-chain
• https://www.realtek.com/en/cu-1-en/cu-1-taiwan-en
• https://www.realtek.com/images/safe-report/Realtek_APRouter_SDK_Advisory-CVE-2021-35392_35395.pdf
• https://www.securityfocus.com/archive/1/534765
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-35394

Get alerted when CVE-2021-35394 or the next vulnerability affects your stack