Realtek rtl81xx SDK Remote Code Execution Vulnerability (CVE-2014-8361)

Realtek rtl81xx SDK Remote Code Execution Vulnerability (CVE-2014-8361)
Realtek rtl81xx SDK Remote Code Execution Vulnerability (CVE-2014-8361)

Release date:
Updated on:

Affected Systems:

Realtek rtl81xx SDK

Description:

Bugtraq id: 74330
CVE (CAN) ID: CVE-2014-8361

Realtek rtl81xx SDK is the rtl81xx NIC Driver.

The Realtek rtl81xx SDK's miniigd SOAP service does not properly filter user input in the NewInternalClient function, that is, it starts to execute system calls and has a remote code execution vulnerability. Remote attackers can construct a NewInternalClient request, attackers can exploit this vulnerability to execute arbitrary code.

<* Source: Ricky "HeadlessZeke" Lawshae
*>

Suggestion:

Vendor patch:

Realtek
-------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://securityadvisories.dlink.com/security/publication.aspx? Name = SAP10055

This article permanently updates the link address: