CRITICAL🚩 CISA KEV⚡ EXPLOIT🇵🇱 Wersja polska

CVE-2014-8361

CVSS 9.8v3.1pub. 2015-05-01upd. 2026-04-22

The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Aterm W1200ex
HW
Aterm
wszystkie wersje
Aterm W1200ex Firmware
OS
Aterm
≤ 1.3.1
Aterm W1200ex Ms
HW
Aterm
wszystkie wersje
Aterm W1200ex Ms Firmware
OS
Aterm
≤ 1.3.1
Aterm W300p
HW
Aterm
wszystkie wersje
Aterm W300p Firmware
OS
Aterm
wszystkie wersje
Aterm W500p
HW
Aterm
wszystkie wersje
Aterm W500p Firmware
OS
Aterm
wszystkie wersje
Aterm Wf300hp2
HW
Aterm
wszystkie wersje
Aterm Wf300hp2 Firmware
OS
Aterm
wszystkie wersje
Aterm Wf800hp
HW
Aterm
wszystkie wersje
Aterm Wf800hp Firmware
OS
Aterm
wszystkie wersje
Aterm Wg1200hp
HW
Aterm
wszystkie wersje
Aterm Wg1200hp2
HW
Aterm
wszystkie wersje
Aterm Wg1200hp2 Firmware
OS
Aterm
≤ 2.5.0
Aterm Wg1200hp3
HW
Aterm
wszystkie wersje
Aterm Wg1200hp3 Firmware
OS
Aterm
≤ 1.3.1
Aterm Wg1200hp Firmware
OS
Aterm
wszystkie wersje
Aterm Wg1200hs
HW
Aterm
wszystkie wersje
Aterm Wg1200hs2
HW
Aterm
wszystkie wersje
Aterm Wg1200hs2 Firmware
OS
Aterm
≤ 2.5.0
Aterm Wg1200hs Firmware
OS
Aterm
wszystkie wersje
Aterm Wg1800hp3
HW
Aterm
wszystkie wersje
Aterm Wg1800hp3 Firmware
OS
Aterm
≤ 1.5.1
Aterm Wg1800hp4
HW
Aterm
wszystkie wersje
Aterm Wg1800hp4 Firmware
OS
Aterm
≤ 1.3.1
Aterm Wg1900hp
HW
Aterm
wszystkie wersje
Aterm Wg1900hp2
HW
Aterm
wszystkie wersje
Aterm Wg1900hp2 Firmware
OS
Aterm
≤ 1.3.1
Aterm Wg1900hp Firmware
OS
Aterm
≤ 2.5.1

CISA KEV — detailsi

Vendori: Realtek
Producti: SDK
Added to KEVi: September 18, 2023
Remediation deadline (US Federal)i: October 9, 2023(overdue)

🇺🇸CISA KEV (original)↗

Required action (CISA)i

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CISA descriptioni

Realtek SDK contains an improper input validation vulnerability in the miniigd SOAP service that allows remote attackers to execute malicious code via a crafted NewInternalClient request.

🔴