Exploitation Summary
CVE-2014-8361 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added September 18, 2023.
EIP tracks 3 public exploits from researchers including Metasploit, Ricky, Lawshae, including a Metasploit module exploits/linux/http/realtek_miniigd_upnp_exec_noauth.
AI-analyzed exploit summary This Metasploit module exploits a blind OS command injection vulnerability in the Realtek SDK's miniigd UPnP SOAP interface. It targets devices using the vulnerable SDK, such as the Trendnet TEW-731BR router, by injecting commands into the SOAP request parameters.
Description
The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.
Exploits (3)
This Metasploit module exploits a blind OS command injection vulnerability in the Realtek SDK's miniigd UPnP SOAP interface. It targets devices using the vulnerable SDK, such as the Trendnet TEW-731BR router, by injecting commands into the SOAP request parameters.
This Metasploit module exploits a blind OS command injection vulnerability in the Realtek SDK's miniigd UPnP SOAP interface. It targets devices using the vulnerable SDK, allowing remote command execution without authentication.
This Metasploit module exploits a blind OS command injection vulnerability in D-Link routers via the UPnP SOAP interface. It targets the 'NewInternalClient' field in the 'AddPortMapping' SOAP action to execute arbitrary commands without authentication.
References (10)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H