Live › vulnerability › CVE-2014-8361
Go to dashboardRealtek SDK's miniigd SOAP service does not validate input in the NewInternalClient request, so a remote attacker can send a crafted request to run malicious code on the device. CISA lists it as actively exploited in the wild.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Realtek SDK | vendor | – | – |
| dlink dir-905l firmware | vendor | <= 2.05b01 | – |
| dlink dir-605l firmware | vendor | <= 1.14b06 | – |
| dlink dir-600l firmware | vendor | <= 1.15 | – |
| dlink dir-619l firmware | vendor | <= 1.15 | – |
| dlink dir-619l firmware | vendor | <= 2.07b02 | – |
| dlink dir-605l firmware | vendor | <= 2.07b02 | – |
| dlink dir-605l firmware | vendor | <= 3.03b07 | – |
| dlink dir-600l firmware | vendor | <= 2.056b06 | – |
| dlink dir-809 firmware | vendor | <= 1.04b02 | – |
| dlink dir-900l firmware | vendor | < 1.15b01 | 1.15b01 |
| dlink dir-501 firmware | vendor | <= 1.01b04 | – |
| dlink dir-515 firmware | vendor | <= 1.01b04 | – |
| dlink dir-615 firmware | vendor | = 10.01b02 | – |
| dlink dir-615 firmware | vendor | <= 6.06b03 | – |
| aterm wg1900hp2 firmware | vendor | <= 1.3.1 | – |
| aterm wg1900hp firmware | vendor | <= 2.5.1 | – |
| aterm wg1800hp4 firmware | vendor | <= 1.3.1 | – |
| aterm wg1800hp3 firmware | vendor | <= 1.5.1 | – |
| aterm wg1200hs2 firmware | vendor | <= 2.5.0 | – |
| aterm wg1200hp3 firmware | vendor | <= 1.3.1 | – |
| aterm wg1200hp2 firmware | vendor | <= 2.5.0 | – |
| aterm w1200ex firmware | vendor | <= 1.3.1 | – |
| aterm w1200ex-ms firmware | vendor | <= 1.3.1 | – |
| aterm wg1200hs firmware | vendor | – | – |
| aterm wg1200hp firmware | vendor | – | – |
| aterm wf800hp firmware | vendor | – | – |
| aterm wf300hp2 firmware | vendor | – | – |
| aterm wr8165n firmware | vendor | – | – |
| aterm w500p firmware | vendor | – | – |
| aterm w300p firmware | vendor | – | – |
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Realtek SDK contains an improper input validation vulnerability in the miniigd SOAP service that allows remote attackers to execute malicious code via a crafted NewInternalClient request.
CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
This page as .md · .json · in your agent: get_signal("CVE-2014-8361")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.