VulnerabilityhighExploited in the wild

Multiple Flaws Affecting Realtek Wi-Fi SDKs Impact Nearly a Million IoT Devices

The Hacker Newsby @TheHackersNewsAug 24, 2021 · 04:42 UTC (Aug 24, 2021)2 min read3

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-35392 CVE-2021-35393 CVE-2021-35394 CVE-2021-35395

Tags: cve-2021-35392 cve-2021-35393 cve-2021-35394 cve-2021-35395 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-35393 +1 related CVE CVE-2021-35392	Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols	9.8 group max	66%	PoC	Aug 16, 2021
CVE-2021-35394	Remote Code Execution via Memory Corruption in Realtek Jungle SDK	9.8	100%	KEVPoC	Aug 16, 2021 KEV Dec 10, 2021
CVE-2021-35395	Multiple Stack Buffer Overflows and Command Injection in Realtek Jungle SDK Web Server	9.8	98%	KEVPoC	Aug 16, 2021 KEV Nov 3, 2021

From the original article

2 min read at thehackernews.com

Taiwanese chip designer Realtek is warning of four security vulnerabilities in three software development kits (SDKs) accompanying its WiFi modules, which are used in almost 200 IoT devices made by at least 65 vendors. The flaws, which affect Realtek SDK v2. x, Realtek "Jungle" SDK v3.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.