VulnerabilitycriticalExploited in the wild

Realtek SDK vulnerability exploitation attempts detected (CVE-2021-35395)

Help Net Securityby @zeljkazorzDec 12, 2023 · 13:09 UTC (Dec 12, 2023)2 min read5 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2021-35395 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-35395 CVE-2021-35392 CVE-2021-35393 CVE-2021-35394

Tags: cve-2021-35395 cve-2021-35392 cve-2021-35393 cve-2021-35394 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-35393 +1 related CVE CVE-2021-35392	Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols	9.8 group max	66%	PoC	Aug 16, 2021
CVE-2021-35394	Remote Code Execution via Memory Corruption in Realtek Jungle SDK	9.8	100%	KEVPoC	Aug 16, 2021 KEV Dec 10, 2021
CVE-2021-35395	Multiple Stack Buffer Overflows and Command Injection in Realtek Jungle SDK Web Server	9.8	98%	KEVPoC	Aug 16, 2021 KEV Nov 3, 2021

From the original article

2 min read at helpnetsecurity.com

Threat actors are attempting to exploit CVE-2021-35395, a group of vulnerabilities in the web interface of the Realtek SDK, to spread Mirai malware to vulnerable IoT devices.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.