{"id":"CVE-2014-8361","aliases":["EUVD-2014-8198","GHSA-r272-2vh9-q99x"],"status":"published","title":"The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a...","description":"The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.99971,"percentile":0.99977,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":false},"cwes":["CWE-20"],"published":"2015-05-01T00:00:00Z","modified":"2026-06-17T00:16:37Z","kev":{"date_added":"2023-09-18","due_date":"2023-10-09","required_action":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2023-09-18"},{"source":"kev","since":"2023-09-18"}],"exploits":[{"source":"metasploit","id":"exploit/linux/http/dlink_upnp_exec_noauth","title":"D-Link Devices UPnP SOAP Command Execution","type":"exploit","platform":"Linux","date":"2013-07-05","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/http/dlink_upnp_exec_noauth"},{"source":"metasploit","id":"exploit/linux/http/realtek_miniigd_upnp_exec_noauth","title":"Realtek SDK Miniigd UPnP SOAP Command Execution","type":"exploit","platform":"Linux","date":"2015-04-24","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/http/realtek_miniigd_upnp_exec_noauth"},{"source":"exploitdb","id":"EDB-37169","title":"Realtek SDK - Miniigd UPnP SOAP Command Execution (Metasploit)","type":"remote","platform":"linux","date":"2015-06-01","verified":true,"url":"https://www.exploit-db.com/exploits/37169"},{"source":"pocgithub","id":"krevetkqqq/CVE-2014-8361","title":"krevetkqqq/CVE-2014-8361","date":"2026-10-30","url":"https://github.com/krevetkqqq/CVE-2014-8361"}],"products":[{"vendor":"aterm","product":"w1200ex-ms_firmware"},{"vendor":"aterm","product":"w1200ex_firmware"},{"vendor":"aterm","product":"w300p_firmware"},{"vendor":"aterm","product":"w500p_firmware"},{"vendor":"aterm","product":"wf300hp2_firmware"},{"vendor":"aterm","product":"wf800hp_firmware"},{"vendor":"aterm","product":"wg1200hp2_firmware"},{"vendor":"aterm","product":"wg1200hp3_firmware"},{"vendor":"aterm","product":"wg1200hp_firmware"},{"vendor":"aterm","product":"wg1200hs2_firmware"},{"vendor":"aterm","product":"wg1200hs_firmware"},{"vendor":"aterm","product":"wg1800hp3_firmware"},{"vendor":"aterm","product":"wg1800hp4_firmware"},{"vendor":"aterm","product":"wg1900hp2_firmware"},{"vendor":"aterm","product":"wg1900hp_firmware"},{"vendor":"aterm","product":"wr8165n_firmware"},{"vendor":"dlink","product":"dir-501_firmware"},{"vendor":"dlink","product":"dir-515_firmware"},{"vendor":"dlink","product":"dir-600l_firmware"},{"vendor":"dlink","product":"dir-605l_firmware"},{"vendor":"dlink","product":"dir-615_firmware"},{"vendor":"dlink","product":"dir-619l_firmware"},{"vendor":"dlink","product":"dir-809_firmware"},{"vendor":"dlink","product":"dir-900l_firmware"},{"vendor":"dlink","product":"dir-905l_firmware"},{"vendor":"realtek","product":"realtek_sdk"},{"vendor":"realtek","product":"sdk"}],"references":[{"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-155/","tags":["x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055","tags":["x_transferred","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/132090/Realtek-SDK-Miniigd-UPnP-SOAP-Command-Execution.html","tags":["x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/74330","tags":["vdb-entry","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/37169/","tags":["exploit","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://jvn.jp/en/jp/JVN47580234/index.html","tags":["third-party-advisory","x_transferred","Third Party Advisory"]},{"url":"http://jvn.jp/en/jp/JVN67456944/index.html","tags":["third-party-advisory","x_transferred","Third Party Advisory"]},{"url":"https://sensorstechforum.com/hinatabot-cve-2014-8361-ddos/","tags":["x_transferred","Third Party Advisory"]},{"url":"https://web.archive.org/web/20150909230440/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055","tags":["x_transferred","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-8361","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8361"},{"url":"https://sensorstechforum.com/hinatabot-cve-2014-8361-ddos"},{"url":"https://www.exploit-db.com/exploits/37169"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-155"},{"url":"https://github.com/advisories/GHSA-r272-2vh9-q99x"}],"sources":{"cve":[{"id":"CVE-2014-8361","description":"The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.","status":"published","published":"2015-05-01T00:00:00Z","modified":"2025-10-21T23:56:01.609Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"updated_at":"2026-11-02T14:33:43.566796Z"}],"euvd":[{"id":"EUVD-2014-8198","description":"The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.","status":"published","published":"2015-05-01T00:00:00Z","modified":"2025-10-21T23:56:01Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"exploited_since":"2023-09-18","updated_at":"2026-11-02T19:49:39.684828Z"}],"ghsa":[{"id":"GHSA-r272-2vh9-q99x","title":"The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a...","description":"The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request.","status":"published","published":"2022-05-13T01:11:12Z","modified":"2025-10-22T00:32:13Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:04:04.786232Z"}],"kev":[{"id":"CVE-2014-8361","title":"Realtek SDK Improper Input Validation Vulnerability","description":"Realtek SDK contains an improper input validation vulnerability in the miniigd SOAP service that allows remote attackers to execute malicious code via a crafted NewInternalClient request.","cwes":["CWE-20"],"kev":{"date_added":"2023-09-18","due_date":"2023-10-09","required_action":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.234141Z"}],"nvd":[{"id":"CVE-2014-8361","description":"The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.","status":"published","published":"2015-05-01T15:59:01.287Z","modified":"2026-06-17T00:16:37.03Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:02:58.385843Z"}]}}