9.8Crítica
KEV
CVE-2021-35394Realtek Jungle SDK Remote Code Execution Vulnerability
Explotación conocida — Realtek Jungle SDK Remote Code Execution Vulnerability
CISA confirmó el 10.12.2021 que esta vulnerabilidad se usa en ataques reales. Plazo para las agencias federales de EE. UU.: 24.12.2021.
Acción requerida: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2021-35394
Descripción
Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary. The binary is affected by multiple memory corruption vulnerabilities and an arbitrary command injection vulnerability that can be exploited by remote unauthenticated attackers.
Debilidad (CWE):
CWE-78
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| realtek | rtl819x jungle software development kit | 2.0 – ≤ 3.4.14b |
Referencias y parches
- https://www.securityfocus.com/archive/1/534765 Broken LinkThird Party AdvisoryVDB Entry
- https://www.realtek.com/en/cu-1-en/cu-1-taiwan-en Broken LinkPatchVendor Advisory
- https://www.realtek.com/images/safe-report/Realtek_APRouter_SDK_Advisory-CVE-2021-35392_35395.pdf PatchVendor Advisory
- https://www.iot-inspector.com/blog/advisory-multiple-issues-realtek-sdk-iot-supply-chain Broken LinkExploitThird Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-35394 US Government Resource
Coincidencias CPE (NVD) (1)
cpe:2.3:a:realtek:rtl819x_jungle_software_development_kit:*:*:*:*:*:*:*:*≥ 2.0 ≤ 3.4.14b