Vendor

Realtek

No CISA KEV deadline is open. CISA last added a Realtek CVE on 18 Sep 2023.

Tracked since 5 Oct · latest article Mon 5 Oct · RSS

Open KEV deadlines: 0; None open
Added to KEV · 90 days: 0; of 3 all time
High exploit odds · current: 0; high · not in KEV
Articles · 7 days: 0; usual rate

Exploited, by due date

CSV download

CVEProductAddedDue · federal deadline

Deadlines passed

CVE-2014-8361SDK18 Sep 2023Deadline passed 9 Oct 2023Ransomware: Unknown · 2 articles

CVE-2021-35394Jungle Software Development Kit (SDK)10 Dec 2021Deadline passed 24 Dec 2021Ransomware: Unknown · 1 article

CVE-2021-35395not in CyberSIXT coverageAP-Router SDK3 Nov 2021Deadline passed 17 Nov 2021Ransomware: Unknown · 0 articles

Products

3 products · 2 CVEs in coverage

SDK1 CVEs · 1 in KEVlatest 5 Oct Jungle Software Development Kit1 CVEs · 1 in KEVlatest 5 Oct AP-Router SDK0 CVEs · 1 in KEV

Coverage

2 articles · all timeFull timeline →

Two articles so far, 5 Oct to 5 Oct.

1 2

Mon 5 Oct · first reportCling botnet exploits Realtek flaw and hides C2 in STUN trafficThe Hacker News
Mon 5 OctClingSTUN turns vulnerable IoT devices into proxy nodes using STUN serversDark Reading

See the full timeline

5 OctClingSTUN turns vulnerable IoT devices into proxy nodes using STUN serversDark Reading
5 OctCling botnet exploits Realtek flaw and hides C2 in STUN trafficThe Hacker News

All CVEs in coverage

CVE-2014-8361Realtek SDK Improper Input Validation VulnerabilityCVSS9.8CriticalExploited99.9%EPSS2articles

CVE-2021-35394Realtek Jungle SDK Remote Code Execution VulnerabilityCVSS9.8CriticalExploited99.8%EPSS1article

How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.

Realtek

Exploited, by due date

Products

Coverage

All CVEs in coverage

On this device

Intel

Settings

Keyboard shortcuts