Vulnerability intelligence
CVE-2014-8361
Realtek SDK Improper Input Validation Vulnerability
Realtek SDK
Realtek SDK contains an improper input validation vulnerability in the miniigd SOAP service that allows remote attackers to execute malicious code via a crafted NewInternalClient request.
CVSS Score
9.8
Critical
EPSS — Exploit Probability
—
Awaiting FIRST.org data
Exploitation
Confirmed in the wild
KEV since 2023-09-18
Remediation
unknown
Federal deadline 2023-10-09
CISA required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Deadline for federal agencies: 2023-10-09.
1 article across 1 outlet · first covered Oct 5, 2026 · latest Oct 5, 2026
Coverage timeline
-
Cling botnet exploits Realtek flaw and hides C2 in STUN trafficthehackernews.com · Oct 5, 2026