Exploited Vulnerabilities DailyCVE-2014-8361: Realtek SDK
EPSS99.9%No. 81 of 1739 in KEV
CVE year2014~9 yrs before listing
Same vendor in KEV3
Same product1
| Field | Value |
|---|---|
| Vendor | Realtek |
| Product | SDK |
| Name | Realtek SDK Improper Input Validation Vulnerability |
| Added to KEV | 2023-09-18 |
| US federal due date | 2023-10-09 |
| Ransomware use | Unknown |
| CWE | CWE-20 |
CISA description
Realtek SDK contains an improper input validation vulnerability in the miniigd SOAP service that allows remote attackers to execute malicious code via a crafted NewInternalClient request.
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A Realtek SDK vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2023-09-18.