CVE-2014-8361—Realtek SDK Improper Input Validation Vulnerability

Vulnerability Name

Realtek SDK Improper Input Validation Vulnerability

Description

Realtek SDK contains an improper input validation vulnerability in the miniigd SOAP service that allows remote attackers to execute malicious code via a crafted NewInternalClient request.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:

Unknown

Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Additional Notes

• https://web.archive.org/web/20150831100501/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055
• https://nvd.nist.gov/vuln/detail/CVE-2014-8361

Related News Articles

• Two Distinct Botnets Exploit Wazuh Server Vulnerability to Launch Mirai-Based AttacksJune 9, 2025
• Mirai Botnet Variant Exploits Four-Faith Router Vulnerability for DDoS AttacksJanuary 8, 2025
• Malware exploits 5-year-old zero-day to infect end-of-life IP camerasAugust 29, 2024
• Unpatched AVTECH IP Camera Flaw Exploited by Hackers for Botnet AttacksAugust 29, 2024

Related Weaknesses

• CWE-20