CVE-2014-8361: Realtek SDK Improper Input Validation Vulnerability
Vulnerability summary
CVE-2014-8361 is a high (CVSS 10.0) vulnerability in Realtek SDK. It is known to be exploited: CISA and CIRCL list it, first on 18-09-2023. EPSS estimates a 99.97% chance of exploitation in the next 30 days, higher than 99.9% of scored vulnerabilities. 3 public exploits are recorded.
Timeline
- 01-05-2015PublishedVulnerability first disclosed.
- 18-09-2023Added to CISA KEVRealtek SDK Improper Input Validation Vulnerability
- 09-10-2023CISA remediation dueApply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- 21-10-2025Last modifiedVulnerability information updated.
- 12-03-2026Added to CIRCL KEVAdded to the CIRCL known exploited vulnerabilities catalog.
Description
The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
99.97%
Chance of exploitation in the next 30 days
Percentile
100%
Versus all other CVEs
30-day change
0.00 pp
From 99.98% on 19-09-2026
Known exploited
Compare KEV catalogs
CISA KEVListed- Added
- 18-09-2023
- Federal due date
- 09-10-2023
CIRCLListed- Added
- 12-03-2026
CISA required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. web.archive.org/web/… nvd.nist.gov/vuln/detail/CVE-2014-8361
Public exploits
3 foundRealtek SDK - Miniigd UPnP SOAP Command Execution (Metasploit)
Maturity: weaponized
D-Link Devices UPnP SOAP Command Execution
exploit/linux/http/dlink_upnp_exec_noauth
Maturity: poc
Realtek SDK Miniigd UPnP SOAP Command Execution
exploit/linux/http/realtek_miniigd_upnp_exec_noauth
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Aterm9 products
- w1200ex_firmware≤ 1.3.1
- w1200ex-ms_firmware≤ 1.3.1
- wg1200hp2_firmware≤ 2.5.0
- wg1200hp3_firmware≤ 1.3.1
- wg1200hs2_firmware≤ 2.5.0
Dlink9 products
- dir-501_firmware≤ 1.01b04
- dir-515_firmware≤ 1.01b04
- dir-600l_firmware≤ 1.15 | ≤ 2.056b06
- dir-605l_firmware≤ 1.14b06 | ≤ 2.07b02 | ≤ 3.03b07
- dir-615_firmware10.01b02 | ≤ 6.06b03
Realtek1 product
3 vendors · 19 products
References
10 links- packetstormsecurity.com/files/132090/Realtek-SDK-Miniigd-UPnP-SOAP-Command-Execution.htmlThird Party AdvisoryVDB Entry
- jvn.jp/en/jp/JVN47580234/index.htmlThird Party Advisory
- jvn.jp/en/jp/JVN67456944/index.htmlThird Party Advisory
- sensorstechforum.com/hinatabot-cve-2014-8361-ddos/Third Party Advisory
- web.archive.org/web/…Third Party Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-8361Government ResourceUS Government Resource