Realtek · Jungle Software Development Kit (SDK)

CVE-2021-35394

Realtek Jungle SDK Remote Code Execution Vulnerability

Exploited in attacks Critical 9.8 Attack chance: 99.9%

What it is

Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary. The binary is affected by multiple memory corruption vulnerabilities and an arbitrary command injection vulnerability that can be exploited by remote unauthenticated attackers.

CISA: RealTek Jungle SDK contains multiple memory corruption vulnerabilities which can allow an attacker to perform remote code execution.

What to do

Apply updates per vendor instructions.

Deadline for US federal agencies: December 24, 2021

Added to the CISA list: December 10, 2021
Published: August 16, 2021
Severity: Critical 9.8 CVSS 3.1
Chance of attacks in the next 30 days (EPSS): 99.9% in the top 0.1% of all known vulnerabilities
Weakness: CWE-78 CWE-138
More details: NVD · CVE.org · CISA

All references (4)

More exploited flaws from Realtek

Added	Vulnerability	Product	Severity	Attack chance
Sep 18, 2023	Improper Input ValidationCVE-2014-8361	SDK	Critical 9.8	>99.9%
Nov 3, 2021	Buffer OverflowCVE-2021-35395	AP-Router SDK	Critical 9.8	98%

All of them →

Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.