CVE

CVE-2014-8361

Realtek SDK Improper Input Validation Vulnerability

Realtek · SDK

Date added (CISA)

2023-09-18

Remediation due

2023-10-09

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

Realtek SDK contains an improper input validation vulnerability in the miniigd SOAP service that allows remote attackers to execute malicious code via a crafted NewInternalClient request.

Source: NVD ↗ · CISA KEV Catalog ↗