CVE-2014-8361

{"id": "CVE-2014-8361", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2015-05-01T15:59:01.287", "references": [{"url": "http://jvn.jp/en/jp/JVN47580234/index.html", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://jvn.jp/en/jp/JVN67456944/index.html", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://packetstormsecurity.com/files/132090/Realtek-SDK-Miniigd-UPnP-SOAP-Command-Execution.html", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/74330", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://www.zerodayinitiative.com/advisories/ZDI-15-155/", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "https://sensorstechforum.com/hinatabot-cve-2014-8361-ddos/", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://web.archive.org/web/20150909230440/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.exploit-db.com/exploits/37169/", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023."}, {"lang": "es", "value": "El servicio miniigd SOAP en Realtek SDK permite a atacantes remotos ejecutar c\u00f3digo arbitrario a trav\u00e9s de una solicitud NewInternalClient manipulada."}], "lastModified": "2024-06-27T18:35:21.117", "cisaActionDue": "2023-10-09", "cisaExploitAdd": "2023-09-18", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:dlink:dir-905l:a1:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F50CC55A-1EA1-4096-8489-1CE1E991B305"}, {"criteria": "cpe:2.3:h:dlink:dir-905l:b1:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "21EDEA1E-6F3C-4E92-A732-270D1E086576"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:dlink:dir-905l_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "05CB91FD-6322-48FB-8CCE-3E7DDB622063", "versionEndIncluding": "2.05b01"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:dlink:dir-605l:a1:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CA9038E9-8519-4DC7-8843-74ADB3527A3F"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:dlink:dir-605l_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "01D15D52-C442-4ABE-917C-A50908082089", "versionEndIncluding": "1.14b06"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:dlink:dir-600l:a1:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F75E7D9C-03BE-4301-AF9E-9929C33F4EEA"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:dlink:dir-600l_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "90962768-A07F-4A1E-9500-F743FD1ECA96", "versionEndIncluding": "1.15"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:realtek:realtek_sdk:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "62471288-17B2-4FCA-A673-CC4B24FB6262"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:dlink:dir-619l:a1:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3271958C-23CD-4937-A21A-905A18ECA736"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:dlink:dir-619l_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "22544CBE-CE28-4E13-99CD-9855A76F8EDF", "versionEndIncluding": "1.15"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:dlink:dir-809:a1:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "184F3169-C4BE-4ABF-AFED-B8D39522092F"}, {"criteria": "cpe:2.3:h:dlink:dir-809:a2:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6CE2F27F-A180-4459-8D73-5544568BB53D"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:dlink:dir-809_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4CCC25F5-5E8A-4164-84D8-DDC0D3519E2B", "versionEndIncluding": "1.04b02"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:dlink:dir-605l:b1:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1B1FC91F-1B77-406F-ADB5-98B07866601E"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:dlink:dir-605l_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "89CE2A47-DC82-49A7-874E-C9533E153ECF", "versionEndIncluding": "2.07b02"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:dlink:dir-605l:c1:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4DD38B14-B291-423A-912C-B1BB2070A9C9"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:dlink:dir-605l_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7B8247C1-8A71-4004-8ECE-1984335D697D", "versionEndIncluding": "3.03b07"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:dlink:dir-619l:b1:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6F28B093-482C-4105-A89D-8B1F1FFD59E9"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:dlink:dir-619l_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2FCD4837-81DE-4C00-AC6C-0E7D6036E1D6", "versionEndIncluding": "2.07b02"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:dlink:dir-600l:b1:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6966FB89-8C98-4FA3-B4CA-21CAD495A830"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:dlink:dir-600l_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C66EAA7D-A420-4CBF-AD01-754983012129", "versionEndIncluding": "2.056b06"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:dlink:dir-501_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1C1339C5-FD81-4885-AF24-A05BC1A3B02A", "versionEndIncluding": "1.01b04"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:dlink:dir-501:a1:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7A8C6464-A044-4C0B-8ADB-C2F61C3009E5"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:dlink:dir-515_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5FA66695-A646-4AB9-B128-A3D87C4C8284", "versionEndIncluding": "1.01b04"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:dlink:dir-515:a1:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "037A3A92-EC1C-41AC-A93A-7319E8E98240"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:dlink:dir-615_firmware:10.01b02:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "17FD57FF-A596-4151-860C-3F0486CD85F4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:dlink:dir-615:j1:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "30B14CF6-4239-4BAB-ABA0-284AFDA2C9E8"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:dlink:dir-615_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F41E73AD-5615-4084-AC4E-516A934303CA", "versionEndIncluding": "6.06b03"}, {"criteria": "cpe:2.3:o:dlink:dir-615_firmware:10.01b02:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "17FD57FF-A596-4151-860C-3F0486CD85F4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:dlink:dir-615:fx:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "63134C26-FEA9-4EF5-97D9-FEDA14B34516"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:aterm:wg1900hp2_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A05F11D3-7701-4152-9937-04D7134B4FE6", "versionEndIncluding": "1.3.1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:aterm:wg1900hp2:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E007A9B5-74FE-4230-9E3E-ACEA89FCABA8"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:aterm:wg1900hp_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D0DD2168-9BE3-49E8-952D-4775911C04D6", "versionEndIncluding": "2.5.1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:aterm:wg1900hp:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "70FC2B64-D47F-42DF-B9B4-7FB07F98A150"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:aterm:wg1800hp4_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BCE7372C-DB92-419F-877C-CCE0DC3EBD6C", "versionEndIncluding": "1.3.1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:aterm:wg1800hp4:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B9BB5205-0D2E-43AF-B228-9C728B404EA3"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:aterm:wg1800hp3_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DBDC178B-2033-47EA-B6CC-99880D5772A2", "versionEndIncluding": "1.5.1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:aterm:wg1800hp3:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AD47CE10-EBD2-49A9-9F1A-B77A502AC196"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:aterm:wg1200hs2_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "424AB1C2-6C52-4416-8983-53D4BCAA0F80", "versionEndIncluding": "2.5.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:aterm:wg1200hs2:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BC88BDE5-19B4-4EF4-8C14-2DEB8EAD3D91"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:aterm:wg1200hp3_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7ED15E56-530C-42A3-B3D3-9F1090C524D5", "versionEndIncluding": "1.3.1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:aterm:wg1200hp3:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F13C13D3-FB31-4E20-A5D4-992D4CF6BBCC"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:aterm:wg1200hp2_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F7FDD550-9FDE-4001-933E-51FF4FBDC5AA", "versionEndIncluding": "2.5.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:aterm:wg1200hp2:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "347DFD5E-56E0-473F-A2B1-E3FD2E99573A"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:aterm:w1200ex_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "88A2A125-9991-459A-99D2-5158B72372BD", "versionEndIncluding": "1.3.1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:aterm:w1200ex:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A6D0D008-E851-4756-87E4-5FA60EE65040"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:aterm:w1200ex-ms_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C69CCDC3-BB41-45F2-987D-674FAD937F40", "versionEndIncluding": "1.3.1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:aterm:w1200ex-ms:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EBD0A960-9FA2-4838-A867-7AC688749771"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:aterm:wg1200hs_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8C5C80AB-4775-4D46-9FC7-C341CEAB08A0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:aterm:wg1200hs:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "05C494FC-4284-4325-A05C-DDAAF86857F7"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:aterm:wg1200hp_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BC81201F-93A7-4B54-A7FE-51E4FD12AE54"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:aterm:wg1200hp:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E80DDB01-BA42-40E1-91A3-EBFCEC3F8A49"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:aterm:wf800hp_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4D83ABC6-AB7F-494C-B386-EB4212F50C55"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:aterm:wf800hp:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "141077D2-4439-44AA-9BD1-C60E253B4C6F"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:aterm:wf300hp2_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0EF09945-D1B9-45FF-87DF-1573DB5F51BC"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:aterm:wf300hp2:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "514DD5D5-E44F-432E-AE87-25DDA62636AB"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:aterm:wr8165n_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "08699FDC-5E04-4CF3-9C9A-9231795A6420"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:aterm:wr8165n:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "90FC20CF-70E5-4E50-A383-E24CB0987280"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:aterm:w500p_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "54E372D5-C699-4ED4-9AB3-326ADC9834BB"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:aterm:w500p:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C9CC1968-0B25-4324-AB07-688B32770220"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:aterm:w300p_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6B02F690-7098-4C8C-B453-3EC8C01F0343"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:aterm:w300p:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A810B81E-8EE7-4F63-9380-7C68CB33B404"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org", "cisaRequiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "cisaVulnerabilityName": "Realtek SDK Improper Input Validation Vulnerability"}