Cloudanix VulnDB

CVE-2014-8361

Critical · 9.8 CISA KEV

CVSS

9.8

EPSS

100.0%

Published

May 1, 2015

CISA due date

Oct 9, 2023

The record

The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.

Affected packages

Ecosystem Package Introduced Fixed