Exploit / PoCcriticalExploited in the wild

Realtek SDK flaws exploited to deliver Mirai bot variant

Security Affairsby @securityaffairsAug 24, 2021 · 07:01 UTC (Aug 24, 2021)3 min read4 · 2 reads

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-35395 CVE-2021-35392 CVE-2021-35393 CVE-2021-35394 CVE-2021-20090

Tags: cve-2021-35395 cve-2021-35392 cve-2021-35393 cve-2021-35394 cve-2021-20090 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-20090	Unauthenticated Path Traversal in Arcadyan Buffalo Router Firmware	9.8	100%	KEVPoC ×2	Apr 29, 2021 KEV Nov 3, 2021
CVE-2021-35393 +1 related CVE CVE-2021-35392	Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols	9.8 group max	66%	PoC	Aug 16, 2021
CVE-2021-35394	Remote Code Execution via Memory Corruption in Realtek Jungle SDK	9.8	100%	KEVPoC	Aug 16, 2021 KEV Dec 10, 2021
CVE-2021-35395	Multiple Stack Buffer Overflows and Command Injection in Realtek Jungle SDK Web Server	9.8	98%	KEVPoC	Aug 16, 2021 KEV Nov 3, 2021

From the original article

3 min read at securityaffairs.com

Researchers warn that threat actors are actively exploiting Realtek SDK vulnerabilities since their technical details were publicly disclosed. Researchers from SAM Seamless Network warn that threat actors are actively exploiting Realtek SDK vulnerabilities since their technical details were publicly disclosed.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.