ZeusQA
Start free

Known exploited vulnerabilities

Realtek vulnerabilities attackers have used

Every Realtek vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 3 Realtek vulnerabilities as exploited in the wild, 0 of them added in the last 12 months. The most recent is CVE-2014-8361, added Sep 18, 2023. AP-Router SDK has the most entries (1).

In KEV, all time
3
Added, last 12 months
0
Used in ransomware
0
New CVEs this week
0

By product

AP-Router SDK (1), Jungle Software Development Kit (SDK) (1), SDK (1).

Every Realtek entry in CISA KEV

  1. CVE-2014-8361

    Added · due

    Realtek SDK Improper Input Validation Vulnerability

    Realtek SDK contains an improper input validation vulnerability in the miniigd SOAP service that allows remote attackers to execute malicious code via a crafted NewInternalClient request.

  2. CVE-2021-35394

    Added · due

    Realtek Jungle SDK Remote Code Execution Vulnerability

    RealTek Jungle SDK contains multiple memory corruption vulnerabilities which can allow an attacker to perform remote code execution.

  3. CVE-2021-35395

    Added · due

    Realtek AP-Router SDK Buffer Overflow Vulnerability

    Realtek AP-Router SDK HTTP web server boa contains a buffer overflow vulnerability due to unsafe copies of some overly long parameters submitted in the form that lead to denial-of-service (DoS).

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works