# CVE-2014-8361

The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.

- Page: https://www.vulneraibility.com/cve/CVE-2014-8361
- CVSS: 9.8
- Known exploited: yes, in CISA KEV since 2023-09-18; CISA due date 2023-10-09
- EPSS: 99.97% (percentile 100.0)
- Public exploit code: 1 on Exploit-DB · 2 Metasploit modules · 1 GitHub proof of concept (first 2015-06-01)
- CISA SSVC: exploitation active, automatable yes, technical impact total (assessed 2025-02-07)
- Published: 2015-05-01

## Affected

- dlink:dir-905l_firmware
- dlink:dir-605l_firmware
- dlink:dir-600l_firmware
- dlink:dir-619l_firmware
- dlink:dir-809_firmware
- dlink:dir-900l_firmware
- realtek:realtek_sdk
- dlink:dir-501_firmware
- dlink:dir-515_firmware
- dlink:dir-615_firmware
- aterm:wg1900hp2_firmware
- aterm:wg1900hp_firmware
- aterm:wg1800hp4_firmware
- aterm:wg1800hp3_firmware
- aterm:wg1200hs2_firmware
- aterm:wg1200hp3_firmware
- aterm:wg1200hp2_firmware
- aterm:w1200ex_firmware
- aterm:w1200ex-ms_firmware
- aterm:wg1200hs_firmware
- aterm:wg1200hp_firmware
- aterm:wf800hp_firmware
- aterm:wf300hp2_firmware
- aterm:wr8165n_firmware
- aterm:w500p_firmware
- aterm:w300p_firmware

## References

- [other] http://www.zerodayinitiative.com/advisories/ZDI-15-155/
- [other] http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055
- [other] http://packetstormsecurity.com/files/132090/Realtek-SDK-Miniigd-UPnP-SOAP-Command-Execution.html
- [other] http://www.securityfocus.com/bid/74330
- [exploit] https://www.exploit-db.com/exploits/37169/
- [advisory] http://jvn.jp/en/jp/JVN47580234/index.html
- [advisory] http://jvn.jp/en/jp/JVN67456944/index.html
- [other] https://sensorstechforum.com/hinatabot-cve-2014-8361-ddos/
- [other] https://web.archive.org/web/20150909230440/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-8361

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.