CVE-2014-8361

🗓️ 01 May 2015 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 9 Media mentions👁 666 Views🌐 WEB

The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request

Reporter	Title	Published	Views	Family All 49
0day.today	Realtek SDK Miniigd UPnP SOAP Command Execution Exploit	2 Jun 201500:00	–	zdt
GithubExploit	Exploit for CVE-2014-8361	31 Mar 202611:18	–	githubexploit
ATTACKERKB	CVE-2014-8361	1 May 201515:59	–	attackerkb
Circl	CVE-2014-8361	1 Jun 201500:00	–	circl
CISA KEV Catalog	Realtek SDK Improper Input Validation Vulnerability	18 Sep 202300:00	–	cisa_kev
CISA	CISA Adds Eight Known Exploited Vulnerabilities to Catalog	18 Sep 202312:00	–	cisa
CNVD	Realtek rtl81xx miniigd SOAP Service Remote Code Execution Vulnerability	30 Apr 201500:00	–	cnvd
Check Point Advisories	Realtek SDK Miniigd AddPortMapping SOAP Action Command Injection (CVE-2014-8361)	20 Sep 201600:00	–	checkpoint_advisories
Cvelist	CVE-2014-8361	1 May 201500:00	–	cvelist
Exploit DB	Realtek SDK - Miniigd UPnP SOAP Command Execution (Metasploit)	1 Jun 201500:00	–	exploitdb

NVD

Node

dlink dir-905l_firmwareRange≤2.05b01

AND

dlink dir-905lMatcha1

dlink dir-905lMatchb1

Node

dlink dir-605l_firmwareRange≤1.14b06

AND

dlink dir-605lMatcha1

Node

dlink dir-600l_firmwareRange≤1.15

AND

dlink dir-600lMatcha1

Node

dlink dir-619l_firmwareRange≤1.15

AND

dlink dir-619lMatcha1

Node

dlink dir-619l_firmwareRange≤2.07b02

AND

dlink dir-619lMatchb1

Node

dlink dir-605l_firmwareRange≤2.07b02

AND

dlink dir-605lMatchb1

Node

dlink dir-605l_firmwareRange≤3.03b07

AND

dlink dir-605lMatchc1

Node

dlink dir-600l_firmwareRange≤2.056b06

AND

dlink dir-600lMatchb1

Node

dlink dir-809_firmwareRange≤1.04b02

AND

dlink dir-809Matcha1

dlink dir-809Matcha2

Node

dlink dir-900l_firmwareRange<1.15b01

AND

dlink dir-900lMatcha1

Node

realtek realtek_sdkMatch-

Node

dlink dir-501_firmwareRange≤1.01b04

AND

dlink dir-501Matcha1

Node

dlink dir-515_firmwareRange≤1.01b04

AND

dlink dir-515Matcha1

Node

dlink dir-615_firmwareMatch10.01b02

AND

dlink dir-615Matchj1

Node

dlink dir-615_firmwareRange≤6.06b03

AND

dlink dir-615Matchfx

Node

aterm wg1900hp2_firmwareRange≤1.3.1

AND

aterm wg1900hp2Match-

Node

aterm wg1900hp_firmwareRange≤2.5.1

AND

aterm wg1900hpMatch-

Node

aterm wg1800hp4_firmwareRange≤1.3.1

AND

aterm wg1800hp4Match-

Node

aterm wg1800hp3_firmwareRange≤1.5.1

AND

aterm wg1800hp3Match-

Node

aterm wg1200hs2_firmwareRange≤2.5.0

AND

aterm wg1200hs2Match-

Node

aterm wg1200hp3_firmwareRange≤1.3.1

AND

aterm wg1200hp3Match-

Node

aterm wg1200hp2_firmwareRange≤2.5.0

AND

aterm wg1200hp2Match-

Node

aterm w1200ex_firmwareRange≤1.3.1

AND

aterm w1200exMatch-

Node

aterm w1200ex-ms_firmwareRange≤1.3.1

AND

aterm w1200ex-msMatch-

Node

aterm wg1200hs_firmware

AND

aterm wg1200hsMatch-

Node

aterm wg1200hp_firmware

AND

aterm wg1200hpMatch-

Node

aterm wf800hp_firmware

AND

aterm wf800hpMatch-

Node

aterm wf300hp2_firmware

AND

aterm wf300hp2Match-

Node

aterm wr8165n_firmware

AND

aterm wr8165nMatch-

Node

aterm w500p_firmware

AND

aterm w500pMatch-

Node

aterm w300p_firmware

AND

aterm w300pMatch-

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-15-155/
jvn	www.jvn.jp/en/jp/JVN67456944/index.html
packetstormsecurity	www.packetstormsecurity.com/files/132090/Realtek-SDK-Miniigd-UPnP-SOAP-Command-Execution.html
sensorstechforum	www.sensorstechforum.com/hinatabot-cve-2014-8361-ddos/
securityfocus	www.securityfocus.com/bid/74330
exploit-db	www.exploit-db.com/exploits/37169/
securityadvisories	www.securityadvisories.dlink.com/security/publication.aspx
jvn	www.jvn.jp/en/jp/JVN47580234/index.html
web	www.web.archive.org/web/20150909230440/http://securityadvisories.dlink.com/security/publication.aspx
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description
NewInternalClient	request body	wanipcn.xml	OS command injection via UPnP WANIPConnection AddPortMapping using NewInternalClient field.
NewLeaseDuration	request body	wanipcn.xml	OS command injection via UPnP WANIPConnection AddPortMapping using NewInternalClient field.
NewInternalPort	request body	wanipcn.xml	OS command injection via UPnP WANIPConnection AddPortMapping using NewInternalClient field.
NewExternalPort	request body	wanipcn.xml	OS command injection via UPnP WANIPConnection AddPortMapping using NewInternalClient field.
NewProtocol	request body	wanipcn.xml	OS command injection via UPnP WANIPConnection AddPortMapping using NewInternalClient field.
NewEnabled	request body	wanipcn.xml	OS command injection via UPnP WANIPConnection AddPortMapping using NewInternalClient field.
NewRemoteHost	request body	wanipcn.xml	OS command injection via UPnP WANIPConnection AddPortMapping using NewInternalClient field.

22 Apr 2026 14:27Current

8.1High risk

Vulners AI Score8.1

CVSS 3.19.8

CVSS 210

EPSS0.94031

SSVC

In Wild