Back to Database
Status published
Unknown
CVE-2014-8361
The miniigd SOAP service in Realtek SDK allows remote attackers...
Vulnerability Description
The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-8361
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.zerodayinitiative.com/advisories/ZDI-15-155/
- http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055
- http://packetstormsecurity.com/files/132090/Realtek-SDK-Miniigd-UPnP-SOAP-Command-Execution.html
- http://www.securityfocus.com/bid/74330
- https://www.exploit-db.com/exploits/37169/
- http://jvn.jp/en/jp/JVN47580234/index.html
- http://jvn.jp/en/jp/JVN67456944/index.html
- https://sensorstechforum.com/hinatabot-cve-2014-8361-ddos/
- https://web.archive.org/web/20150909230440/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055
More from dlink
View All →CVE-2022-48108
D-Link DIR_878_FW1.30B08 was discovered to contain a command injection vulnerability...
Unknown
0
CVE-2022-48107
D-Link DIR_878_FW1.30B08 was discovered to contain a command injection vulnerability...
Unknown
0
CVE-2022-47035
Buffer Overflow Vulnerability in D-Link DIR-825 v1.33.0.44ebdd4-embedded and below allows...
Unknown
0
CVE-2022-46642
D-Link DIR-846 A1_FW100A43 was discovered to contain a command injection...
Unknown
0
CVE-2022-46641
D-Link DIR-846 A1_FW100A43 was discovered to contain a command injection...
Unknown
0
Affected Vendor
dlink
View all reports →Affected Software
dir-905l firmware, dir-605l firmware, dir-600l firmware, dir-619l firmware, dir-809 firmware, dir-900l firmware, realtek sdk, dir-501 firmware, dir-515 firmware, dir-615 firmware, wg1900hp2 firmware, wg1900hp firmware, wg1800hp4 firmware, wg1800hp3 firmware, wg1200hs2 firmware, wg1200hp3 firmware, wg1200hp2 firmware, w1200ex firmware, w1200ex-ms firmware, wg1200hs firmware, wg1200hp firmware, wf800hp firmware, wf300hp2 firmware, wr8165n firmware, w500p firmware, w300p firmware
Vulnerable Versions:
0, 10.01b02
Timeline
Official Publish:
May 1st, 2015
Last Modified:
October 21st, 2025
Added to House:
July 19th, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.