Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

CVE-2021-35395

🗓️ 16 Aug 2021 11:07:29Reported by mitreType 
cve
 cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 1131 Views🌐 WEB

Realtek Jungle SDK v2.x-v3.4.14B HTTP server exposed to stack buffer overflow & arbitrary command execution - CVE-2021-3539

Related
Detection
Refs
Paths
Social
ReporterTitlePublishedViews
Family
attackerkb
attackerkb		CVE-2021-35395
16 Aug 202100:00
–attackerkb
bdu_fstec
BDU FSTEC		The vulnerability in the web interface for managing Realtek SDK devices allows a hacker to execute arbitrary code.
17 Aug 202100:00
–bdu_fstec
circl
Circl		CVE-2021-35395
16 Aug 202116:14
–circl
cisa_kev
CISA KEV Catalog		Realtek AP-Router SDK Buffer Overflow Vulnerability
3 Nov 202100:00
–cisa_kev
cnnvd
CNNVD		Realtek Jungle SDK 安全漏洞
16 Aug 202100:00
–cnnvd
checkpoint_advisories
Check Point Advisories		Realtek Jungle SDK Buffer Overflow (CVE-2021-35392; CVE-2021-35393; CVE-2021-35395)
31 Aug 202100:00
–checkpoint_advisories
cvelist
Cvelist		CVE-2021-35395
16 Aug 202111:07
–cvelist
malwarebytes
Malwarebytes		Realtek-based routers, smart devices are being gobbled up by a voracious botnet
24 Aug 202113:36
–malwarebytes
mmpc
Microsoft Malware Protection		Microsoft research uncovers new Zerobot capabilities
21 Dec 202220:00
–mmpc
mmpc
Microsoft Malware Protection		Vulnerable SDK components lead to supply chain risks in IoT and OT environments
22 Nov 202217:00
–mmpc
Rows per page
NVD
Node
realtekrtl819x_jungle_software_development_kitRange2.0–3.4.14b
ParameterPositionPathDescriptionCWE
submit-urlrequest body/formRebootCheckStack-based buffer overflow in formRebootCheck via unsafe copy of submit-url parameterCWE-120
submit-urlrequest body/formWscStack-based buffer overflow in formWsc via unsafe copy of submit-url parameterCWE-120
peerPinrequest body/formWscStack-based buffer overflow in formWsc via unsafe copy of submit-url parameterCWE-120
submit-urlrequest body/formWlanMultipleAPStack-based buffer overflow in formWlanMultipleAP via unsafe copy of submit-url parameterCWE-120
ifnamerequest body/formWlSiteSurveyStack-based buffer overflow in formWlSiteSurvey via unsafe copy of ifname parameterCWE-120
hostnamerequest body/formStaticDHCPStack-based buffer overflow in formStaticDHCP via unsafe copy of hostname parameterCWE-120
peerPinrequest body/formWscStack-based buffer overflow in formWsc via unsafe copy of 'peerPin' parameterCWE-120
sysCmdrequest body/formSysCmdArbitrary command execution in formSysCmd via the sysCmd parameterCWE-77
peerPinrequest body/formWscArbitrary command injection in formWsc via the 'peerPin' parameterCWE-77

Realtek SDK vulnerability exploitation attempts detected (CVE-2021-35395) - https://t.co/JdSWLmYNRN?amp=1 #cybersecurity #infosec

Realtek SDK vulnerability exploitation attempts detected (CVE-2021-35395) #cybersecurity #awareness #vulnerability

Learn it. Realtek SDK vulnerability exploitation attempts detected (CVE-2021-35395) https://t.co/ZjU6IknlNp?amp=1 #tech #digital #data #security

... to exploit CVE-2021-35395, a group of vulnerabilities in the web interface of the Realtek SDK, to spread Mirai malware to vulnerable IoT devices. #cybernews #thecybernewsfeed

(Same from about 4 hours ago.) I think that the most retweeted(39 times) tweet that contains CVE ID between Aug 23 2021 19:01 UTC and Aug 24 2021 19:00 UTC is: /bad_packets/status/1430013950364585991 It has CVE-2021-35395. #l24_iflwhkp3yv5om

(second → most) I think that the most retweeted(33 times) tweet that contains CVE ID between Aug 23 2021 15:01 UTC and Aug 24 2021 15:00 UTC is: /bad_packets/status/1430013950364585991 It has CVE-2021-35395. #l24_iflwhkp3yv5om

Realtek SDK vulnerability exploitation attempts detected (CVE-2021-35395) - Help Net Security https://t.co/o2kjX0k1tC?amp=1 #cybersecurity #threatintelligence #cybernews

New variant of #Mirai Botnet targeting thousands of IoT devices by abusing #Realtek SDK #vulnerability tracked as CVE-2021-35395 #router #cybersecurity #IoT #botnet #infosec #threatIntel

Realtek SDK vulnerability exploitation attempts detected (CVE-2021-35395) https://t.co/1tutAQnAKd?amp=1 #IoTSecurity #Realtek #vulnerability #Mirai #malware #botnet #cybersecurity #CVE #cybersecurity #infosec

Realtek SDK vulnerability exploitation attempts detected (CVE-2021-35395)

Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 03:57Current
10Critical risk
Vulners AI Score10
CVSS 3.19.8
CVSS 210
EPSS0.97961
SSVC
In Wild
realtekjungle sdkhttp servercvevulnerabilitystack buffer overflowarbitrary command executionexploitabilityremote attackers
1131