{"schemaVersion":3,"id":"CVE-2021-35394","aliases":[],"status":"published","duplicateOf":null,"title":"Realtek Jungle SDK Remote Code Execution Vulnerability","description":"Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary. The binary is affected by multiple memory corruption vulnerabilities and an arbitrary command injection vulnerability that can be exploited by remote unauthenticated attackers.","dates":{"published":"2021-08-16T11:07:38.000Z","modified":"2025-10-21T23:25:37.658Z","reserved":null,"kevAdded":["2021-12-10T00:00:00.000Z","2026-03-12T00:00:00.000Z"],"kevDue":["2021-12-24T00:00:00.000Z"]},"cvss":{"headline":{"score":10,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":10,"severity":"high","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.99877,"percentile":0.99964,"severity":"critical","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.0160000000000049,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.99861},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.99877,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.99877,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.99877,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.99877,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.99877,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.99877,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.99877,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.99877,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.99877,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.99877,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.99877,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.99877,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.99877,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.99877,"percentile":0.99964}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.99861,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.99877,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.99877,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.99877,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.99877,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.99877,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.99877,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.99877,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.99877,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.99877,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.99877,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.99877,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.99877,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.99877,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.99877,"percentile":0.99964}]},"kev":{"state":"listed","entries":[{"source":"cisa","sourceLabel":"CISA","dateAdded":"2021-12-10T00:00:00.000Z","dueDate":"2021-12-24T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Realtek Jungle SDK Remote Code Execution Vulnerability","description":"RealTek Jungle SDK contains multiple memory corruption vulnerabilities which can allow an attacker to perform remote code execution.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2021-35394","label":"nvd.nist.gov/vuln/detail/CVE-2021-35394"}],"vendor":"Realtek","product":"Jungle Software Development Kit (SDK)","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null},{"source":"circl","sourceLabel":"CIRCL","dateAdded":"2026-03-12T00:00:00.000Z","dueDate":null,"requiredAction":null,"name":null,"description":null,"notes":[],"vendor":null,"product":null,"ransomware":false,"ransomwareUse":null,"exploitationType":null}],"listedCount":2,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":true,"entry":{"source":"cisa","sourceLabel":"CISA","dateAdded":"2021-12-10T00:00:00.000Z","dueDate":"2021-12-24T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Realtek Jungle SDK Remote Code Execution Vulnerability","description":"RealTek Jungle SDK contains multiple memory corruption vulnerabilities which can allow an attacker to perform remote code execution.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2021-35394","label":"nvd.nist.gov/vuln/detail/CVE-2021-35394"}],"vendor":"Realtek","product":"Jungle Software Development Kit (SDK)","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":true,"entry":{"source":"circl","sourceLabel":"CIRCL","dateAdded":"2026-03-12T00:00:00.000Z","dueDate":null,"requiredAction":null,"name":null,"description":null,"notes":[],"vendor":null,"product":null,"ransomware":false,"ransomwareUse":null,"exploitationType":null}}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_C0DB98232B8E28FB","name":"Exploit Reference (iot-inspector.com)","source":"reference","url":"https://www.iot-inspector.com/blog/advisory-multiple-issues-realtek-sdk-iot-supply-chain","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-78","name":"Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","description":"The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/78.html"}],"affected":[{"vendor":"realtek","product":"rtl819x_jungle_software_development_kit","name":"rtl819x jungle software development kit","label":"rtl819x_jungle_software_development_kit","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 2.0, ≤ 3.4.14b","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 2.0, ≤ 3.4.14b","eol":null,"hubHref":"/vendor/realtek/rtl819x_jungle_software_development_kit"}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.securityfocus.com/archive/1/534765","label":"www.securityfocus.com/archive/1/534765","hostname":"www.securityfocus.com","tags":["X Refsource MISC","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://www.realtek.com/en/cu-1-en/cu-1-taiwan-en","label":"www.realtek.com/en/cu-1-en/cu-1-taiwan-en","hostname":"www.realtek.com","tags":["X Refsource MISC","Broken Link","Patch","Vendor Advisory"]},{"url":"https://www.realtek.com/images/safe-report/Realtek_APRouter_SDK_Advisory-CVE-2021-35392_35395.pdf","label":"www.realtek.com/images/safe-report/Realtek_APRouter_SDK_Advisory-CVE-2021-35392_35395.pdf","hostname":"www.realtek.com","tags":["X Refsource MISC","Patch","Vendor Advisory"]},{"url":"https://www.iot-inspector.com/blog/advisory-multiple-issues-realtek-sdk-iot-supply-chain","label":"www.iot-inspector.com/blog/advisory-multiple-issues-realtek-sdk-iot-supply-chain","hostname":"www.iot-inspector.com","tags":["X Refsource MISC","Broken Link","Exploit","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-35394","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-35394","hostname":"www.cisa.gov","tags":["Government Resource","US Government Resource"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2021-08-16T11:07:38.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"kev-added","date":"2021-12-10T00:00:00.000Z","label":"Added to CISA KEV","detail":"Realtek Jungle SDK Remote Code Execution Vulnerability","source":"cisa"},{"kind":"kev-due","date":"2021-12-24T00:00:00.000Z","label":"CISA remediation due","detail":"Apply updates per vendor instructions.","source":"cisa"},{"kind":"modified","date":"2025-10-21T23:25:37.658Z","label":"Last modified","detail":"Vulnerability information updated.","source":null},{"kind":"kev-added","date":"2026-03-12T00:00:00.000Z","label":"Added to CIRCL KEV","detail":"Added to the CIRCL known exploited vulnerabilities catalog.","source":"circl"}],"risk":{"score":90,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T17:21:03.045Z","stale":false,"partial":false}}