Vulnerabilityhigh

65 vendors affected by severe vulnerabilities in Realtek chips

Help Net Securityby @helpnetsecurityAug 16, 2021 · 00:00 UTC (Aug 16, 2021)1 min read2

Read at helpnetsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-35392 CVE-2021-35393 CVE-2021-35394 CVE-2021-35395

Tags: cve-2021-35392 cve-2021-35393 cve-2021-35394 cve-2021-35395 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-35393 +1 related CVE CVE-2021-35392	Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols	9.8 group max	66%	PoC	Aug 16, 2021
CVE-2021-35394	Remote Code Execution via Memory Corruption in Realtek Jungle SDK	9.8	100%	KEVPoC	Aug 16, 2021 KEV Dec 10, 2021
CVE-2021-35395	Multiple Stack Buffer Overflows and Command Injection in Realtek Jungle SDK Web Server	9.8	98%	KEVPoC	Aug 16, 2021 KEV Nov 3, 2021

From the original article

1 min read at helpnetsecurity.com

A vulnerability within the Realtek RTL819xD module allows attackers to gain complete access to the device, installed operating systems and other network devices. The chips supplied by Realtek are used by almost all well-known manufacturers and can be found in VoIP and wireless routers, repeaters, IP cameras, and smart lighting controls – just to name a few.

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.