CyberSec.Space Logo
Back to CVE Browser

CVE-2014-8361

Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
EPSS Score27.9510%
EPSS Percentile89.25th
PublishedMay 1, 2015
Last ModifiedApr 22, 2026

Vulnerability Description

The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.

Affected Platforms (CPE)

💻
Dlink

Dir 905l Firmware

<= 2.05b01
💻
Dlink

Dir 605l Firmware

<= 1.14b06
💻
Dlink

Dir 600l Firmware

<= 1.15
💻
Dlink

Dir 619l Firmware

<= 1.15
💻
Dlink

Dir 619l Firmware

<= 2.07b02
💻
Dlink

Dir 605l Firmware

<= 2.07b02
💻
Dlink

Dir 605l Firmware

<= 3.03b07
💻
Dlink

Dir 600l Firmware

<= 2.056b06
💻
Dlink

Dir 809 Firmware

<= 1.04b02
💻
Dlink

Dir 900l Firmware

< 1.15b01
📦
Realtek

Realtek Sdk

All versions
💻
Dlink

Dir 501 Firmware

<= 1.01b04
💻
Dlink

Dir 515 Firmware

<= 1.01b04
💻
Dlink

Dir 615 Firmware

= 10.01b02
💻
Dlink

Dir 615 Firmware

<= 6.06b03
💻
Aterm

Wg1900hp2 Firmware

<= 1.3.1
💻
Aterm

Wg1900hp Firmware

<= 2.5.1
💻
Aterm

Wg1800hp4 Firmware

<= 1.3.1
💻
Aterm

Wg1800hp3 Firmware

<= 1.5.1
💻
Aterm

Wg1200hs2 Firmware

<= 2.5.0
💻
Aterm

Wg1200hp3 Firmware

<= 1.3.1
💻
Aterm

Wg1200hp2 Firmware

<= 2.5.0
💻
Aterm

W1200ex Firmware

<= 1.3.1
💻
Aterm

W1200ex Ms Firmware

<= 1.3.1
💻
Aterm

Wg1200hs Firmware

All versions
💻
Aterm

Wg1200hp Firmware

All versions
💻
Aterm

Wf800hp Firmware

All versions
💻
Aterm

Wf300hp2 Firmware

All versions
💻
Aterm

Wr8165n Firmware

All versions
💻
Aterm

W500p Firmware

All versions
💻
Aterm

W300p Firmware

All versions

References & Advisories

🔗 http://jvn.jp/en/jp/JVN47580234/index.html
🔗 http://jvn.jp/en/jp/JVN67456944/index.html
🔗 http://packetstormsecurity.com/files/132090/Realtek-SDK-Miniigd-UPnP-SOAP-Command-Execution.html
🔗 http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055
🔗 http://www.securityfocus.com/bid/74330
🔗 http://www.zerodayinitiative.com/advisories/ZDI-15-155/
🔗 https://sensorstechforum.com/hinatabot-cve-2014-8361-ddos/
🔗 https://web.archive.org/web/20150909230440/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055

Related Vulnerabilities

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...

CVE-2026-121905.3

A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the compo...

CVE-2026-121895.3

A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component com.tranzm...

CVE-2026-121886.3

A vulnerability was detected in Grit42 Grit up to 0.11.0. Affected by this issue is some unknown functionality of the file modules...