CVE-2014-8361
01.05.2015, 15:59
The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.Enginsight
| Vendor | Product | Version |
|---|---|---|
| dlink | dir-905l_firmware | 𝑥 ≤ 2.05b01 |
| dlink | dir-605l_firmware | 𝑥 ≤ 1.14b06 |
| dlink | dir-600l_firmware | 𝑥 ≤ 1.15 |
| dlink | dir-619l_firmware | 𝑥 ≤ 1.15 |
| dlink | dir-619l_firmware | 𝑥 ≤ 2.07b02 |
| dlink | dir-605l_firmware | 𝑥 ≤ 2.07b02 |
| dlink | dir-605l_firmware | 𝑥 ≤ 3.03b07 |
| dlink | dir-600l_firmware | 𝑥 ≤ 2.056b06 |
| dlink | dir-809_firmware | 𝑥 ≤ 1.04b02 |
| dlink | dir-900l_firmware | 𝑥 < 1.15b01 |
| realtek | realtek_sdk | - |
| dlink | dir-501_firmware | 𝑥 ≤ 1.01b04 |
| dlink | dir-515_firmware | 𝑥 ≤ 1.01b04 |
| dlink | dir-615_firmware | 10.01b02:b02 |
| dlink | dir-615_firmware | 𝑥 ≤ 6.06b03 |
| aterm | wg1900hp2_firmware | 𝑥 ≤ 1.3.1 |
| aterm | wg1900hp_firmware | 𝑥 ≤ 2.5.1 |
| aterm | wg1800hp4_firmware | 𝑥 ≤ 1.3.1 |
| aterm | wg1800hp3_firmware | 𝑥 ≤ 1.5.1 |
| aterm | wg1200hs2_firmware | 𝑥 ≤ 2.5.0 |
| aterm | wg1200hp3_firmware | 𝑥 ≤ 1.3.1 |
| aterm | wg1200hp2_firmware | 𝑥 ≤ 2.5.0 |
| aterm | w1200ex_firmware | 𝑥 ≤ 1.3.1 |
| aterm | w1200ex-ms_firmware | 𝑥 ≤ 1.3.1 |
| aterm | wg1200hs_firmware | * |
| aterm | wg1200hp_firmware | * |
| aterm | wf800hp_firmware | * |
| aterm | wf300hp2_firmware | * |
| aterm | wr8165n_firmware | * |
| aterm | w500p_firmware | * |
| aterm | w300p_firmware | * |
𝑥
= Vulnerable software versions
References