Login Request a demo
Critical severity · published Aug 16, 2021
CVE-2021-35394
Realtek Jungle SDK Remote Code Execution Vulnerability
In wildKEV
9.8
CVSS
99.9%
EPSS
Yes
On KEV
Description
Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary. The binary is affected by multiple memory corruption vulnerabilities and an arbitrary command injection vulnerability that can be exploited by remote unauthenticated attackers.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)99.9% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Dec 10, 2021
Federal remediation dueDec 24, 2021
Ransomware campaign useNot known
Affected products
Which versions
RJ
Rtl819x Jungle Software Development Kit · Realtek
2.0 through 3.4.14b · source: NVD
JS
Jungle Software Development Kit (SDK) · Realtek
All versions, or not specified · source: KEV
Affected product
RJ
Rtl819x Jungle Software Development Kit
Realtek
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-35394
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-35394
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
x_refsource_MISC
https://www.securityfocus.com/archive/1/534765
x_refsource_MISC
https://www.realtek.com/en/cu-1-en/cu-1-taiwan-en
x_refsource_MISC
https://www.realtek.com/images/safe-report/Realtek_APRouter_SDK_Advisory-CVE-2021-35392_35395.pdf
x_refsource_MISC
https://www.iot-inspector.com/blog/advisory-multiple-issues-realtek-sdk-iot-supply-chain
More from Rtl819x Jungle Software Development Kit
9.8
CVE-2021-35395
Realtek AP-Router SDK Buffer Overflow Vulnerability
9.8
CVE-2021-35393
Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols
8.8
CVE-2023-47677
A cross-site request forgery (csrf) vulnerability exists in the boa CSRF protection functionality of Realtek rtl819x Jungle SDK v3.4.11
7.5
CVE-2021-35392
Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols
7.2
CVE-2024-21778
A heap-based buffer overflow vulnerability exists in the configuration file mib_init_value_array functionality of Realtek rtl819x Jungle SDK v3.4.11