CVE-2014-8361

Published: May 1, 2015Modified: Apr 22, 2026CISA KEV

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.

Affected (31)

Products: Dlink: Dir 905l Firmware, Dir 605l Firmware, Dir 600l Firmware, Dir 619l Firmware, Dir 809 Firmware, Dir 900l Firmware, Dir 501 Firmware, Dir 515 Firmware, Dir 615 Firmware · Realtek: Realtek Sdk · Aterm: Wg1900hp2 Firmware, Wg1900hp Firmware, Wg1800hp4 Firmware, Wg1800hp3 Firmware, Wg1200hs2 Firmware, Wg1200hp3 Firmware, Wg1200hp2 Firmware, W1200ex Firmware, W1200ex Ms Firmware, Wg1200hs Firmware, Wg1200hp Firmware, Wf800hp Firmware, Wf300hp2 Firmware, Wr8165n Firmware, W500p Firmware, W300p Firmware

9 products

1 product

16 products

Configuration A

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Dlink Dir 905l Firmware	Up to 2.05b01

Running on/with	Platform Versions
Dlink Dir 905l	Version a1
Dlink Dir 905l	Version b1

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 605l Firmware	Up to 1.14b06

Running on/with	Platform Versions
Dlink Dir 605l	Version a1

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 600l Firmware	Up to 1.15

Running on/with	Platform Versions
Dlink Dir 600l	Version a1

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 619l Firmware	Up to 1.15

Running on/with	Platform Versions
Dlink Dir 619l	Version a1

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 619l Firmware	Up to 2.07b02

Running on/with	Platform Versions
Dlink Dir 619l	Version b1

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 605l Firmware	Up to 2.07b02

Running on/with	Platform Versions
Dlink Dir 605l	Version b1

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 605l Firmware	Up to 3.03b07

Running on/with	Platform Versions
Dlink Dir 605l	Version c1

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 600l Firmware	Up to 2.056b06

Running on/with	Platform Versions
Dlink Dir 600l	Version b1

Configuration I

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Dlink Dir 809 Firmware	Up to 1.04b02

Running on/with	Platform Versions
Dlink Dir 809	Version a1
Dlink Dir 809	Version a2

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 900l Firmware	Before 1.15b01

Running on/with	Platform Versions
Dlink Dir 900l	Version a1

Configuration K

1 vulnerable

Vulnerable Software	Affected Versions
Realtek Realtek Sdk	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 501 Firmware	Up to 1.01b04

Running on/with	Platform Versions
Dlink Dir 501	Version a1

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 515 Firmware	Up to 1.01b04

Running on/with	Platform Versions
Dlink Dir 515	Version a1

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 615 Firmware	Version 10.01b02

Running on/with	Platform Versions
Dlink Dir 615	Version j1

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 615 Firmware	Up to 6.06b03

Running on/with	Platform Versions
Dlink Dir 615	Version fx

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Aterm Wg1900hp2 Firmware	Up to 1.3.1

Running on/with	Platform Versions
Aterm Wg1900hp2	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Aterm Wg1900hp Firmware	Up to 2.5.1

Running on/with	Platform Versions
Aterm Wg1900hp	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Aterm Wg1800hp4 Firmware	Up to 1.3.1

Running on/with	Platform Versions
Aterm Wg1800hp4	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Aterm Wg1800hp3 Firmware	Up to 1.5.1

Running on/with	Platform Versions
Aterm Wg1800hp3	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Aterm Wg1200hs2 Firmware	Up to 2.5.0

Running on/with	Platform Versions
Aterm Wg1200hs2	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Aterm Wg1200hp3 Firmware	Up to 1.3.1

Running on/with	Platform Versions
Aterm Wg1200hp3	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Aterm Wg1200hp2 Firmware	Up to 2.5.0

Running on/with	Platform Versions
Aterm Wg1200hp2	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Aterm W1200ex Firmware	Up to 1.3.1

Running on/with	Platform Versions
Aterm W1200ex	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Aterm W1200ex Ms Firmware	Up to 1.3.1

Running on/with	Platform Versions
Aterm W1200ex Ms	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Aterm Wg1200hs Firmware	All versions

Running on/with	Platform Versions
Aterm Wg1200hs	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Aterm Wg1200hp Firmware	All versions

Running on/with	Platform Versions
Aterm Wg1200hp	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Aterm Wf800hp Firmware	All versions

Running on/with	Platform Versions
Aterm Wf800hp	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Aterm Wf300hp2 Firmware	All versions

Running on/with	Platform Versions
Aterm Wf300hp2	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Aterm Wr8165n Firmware	All versions

Running on/with	Platform Versions
Aterm Wr8165n	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Aterm W500p Firmware	All versions

Running on/with	Platform Versions
Aterm W500p	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Aterm W300p Firmware	All versions

Running on/with	Platform Versions
Aterm W300p	All versions

References (19)

http://jvn.jp/en/jp/JVN47580234/index.html

Source: cve@mitre.org

Third Party Advisory

http://jvn.jp/en/jp/JVN67456944/index.html

Source: cve@mitre.org

Third Party Advisory

http://packetstormsecurity.com/files/132090/Realtek-SDK-Miniigd-UPnP-SOAP-Command-Execution.html

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/74330

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-15-155/

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://sensorstechforum.com/hinatabot-cve-2014-8361-ddos/

Source: cve@mitre.org

Third Party Advisory

https://web.archive.org/web/20150909230440/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055

Source: cve@mitre.org

Third Party Advisory

https://www.exploit-db.com/exploits/37169/

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://jvn.jp/en/jp/JVN47580234/index.html