CVE-2014-8361
CISA KEVAs of 2025-10-21, CVE-2014-8361 is a CVSS 9.8 (CRITICAL-severity) vulnerability. CISA KEV-listed (known exploited); Public exploit code available. EPSS exploitation probability 100.0%. Threadlinqs Intelligence tracks 3 threats exploiting it.
Last updated: 2025-10-21
The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.
CVSS v3 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitation status
CISA KEV-listed (known exploited) · public exploit code available
- trickest/cve (trickest)
Threats tracking this CVE
- TuxBot v3 Evolution: Keksec-Linked IoT/Linux Botnet with Verbatim LLM Chain-of-Thought Code Artifacts — MEDIUM
- TuxBot v3 Evolution: LLM-Assisted IoT Botnet Framework With a Broken Multi-CVE Exploit Chain — HIGH
- P2P Botnets in the Wild: Pink, Hajime, Mozi, FritzFrog, and Panchan — Decentralized C2 Landscape (360 Netlab Continuous Monitoring) — HIGH
References
- http://www.zerodayinitiative.com/advisories/ZDI-15-155/
- http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055
- http://packetstormsecurity.com/files/132090/Realtek-SDK-Miniigd-UPnP-SOAP-Command-Execution.html
- http://www.securityfocus.com/bid/74330
- https://www.exploit-db.com/exploits/37169/
- http://jvn.jp/en/jp/JVN47580234/index.html
- http://jvn.jp/en/jp/JVN67456944/index.html
- https://sensorstechforum.com/hinatabot-cve-2014-8361-ddos/
- https://web.archive.org/web/20150909230440/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055
← all vulnerabilities · Markdown version · Threadlinqs Intelligence
Enriched from CVE.org, NVD (this product uses the NVD API but is not endorsed or certified by the NVD), FIRST EPSS, CISA KEV, and GitHub Security Advisories.