cve/2014/CVE-2014-8361.md

CVE-2014-8361

Description

The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.

POC

Reference

• http://packetstormsecurity.com/files/132090/Realtek-SDK-Miniigd-UPnP-SOAP-Command-Execution.html
• https://www.exploit-db.com/exploits/37169/

Github

• https://github.com/MiracleAnameke/Cybersecurity-Vulnerability-and-Exposure-Report
• https://github.com/Ostorlab/KEV
• https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors
• https://github.com/oxMdee/Cybersecurity-Vulnerability-and-Exposure-Report
• https://github.com/xuguowong/Mirai-MAL