Realtek vulnerabilities3 known to be exploited.
Realtek has 71 published vulnerabilities across 81 products in our catalogue. 3 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Rtl819x Jungle Software Development Kit, with 23. If you run Realtek software, patch the exploited flaws first.
The most recent Realtek flaw added to the known-exploited list is CVE-2014-8361, on 18 September 2023. We keep watching the known-exploited list.
Which Realtek products have the most vulnerabilities?
Rtl819x Jungle Software Development Kit leads with 23 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Realtek vulnerabilities are being exploited?
3 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 9.8Realtek SDK Improper Input Validation Vulnerability
Realtek SDK contains an improper input validation vulnerability in the miniigd SOAP service that allows remote attackers to execute malicious code via a crafted NewInternalClient request.
- 9.8Realtek Jungle SDK Remote Code Execution Vulnerability
RealTek Jungle SDK contains multiple memory corruption vulnerabilities which can allow an attacker to perform remote code execution.
- 9.8Realtek AP-Router SDK Buffer Overflow Vulnerability
Realtek AP-Router SDK HTTP web server boa contains a buffer overflow vulnerability due to unsafe copies of some overly long parameters submitted in the form that lead to denial-of-service (DoS).
Which Realtek flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- >99%
The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.
- >99%
Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary.
- 98%
Realtek Jungle SDK version v2.x up to v3.4.14B provides an HTTP web server exposing a management interface that can be used to configure the access point.
- 83%CVE-2021-35392High
Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols.
- 68%CVE-2021-35393Critical
Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols.
- 37%CVE-2022-27255Critical
In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow.
- 36%CVE-2008-5664Critical
Stack-based buffer overflow in Realtek Media Player (aka Realtek Sound Manager, RtlRack, or rtlrack.exe) 1.15.0.0 allows remote attackers to execute arbitrary code via a crafted playlist (PLA) file.
- 8.7%CVE-2019-19822High
A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) allows remote attackers to retrieve the configuration, including sensitive data (usernames and passwords).
- 3.2%CVE-2023-50381High
Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11.
All Realtek products we track.
34 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Rtl819x Jungle Software Development Kitrtl819x_jungle_software_development_kit23 vulnerabilities3 versions
- Rtl8195a Firmwarertl8195a_firmware7 vulnerabilities1 version
- Rtl8195am Firmwarertl8195am_firmware4 vulnerabilities2 versions
- Rtsupx USB Utility Driverrtsupx_usb_utility_driver4 vulnerabilities1 version
- Rtk 11n AP Firmwarertk_11n_ap_firmware2 vulnerabilities1 version
- Rtl8111fp-Cg Firmwarertl8111fp-cg_firmware2 vulnerabilities3 versions
- Audio Driver Firmwareaudio_driver_firmware1 vulnerability1 version
- Ecos Msdk Firmwareecos_msdk_firmware1 vulnerability1 version
- Ecos Rsdk Firmwareecos_rsdk_firmware1 vulnerability1 version
- Ndisndis1 vulnerability1 version
- Realtek Media Playerrealtek_media_player1 vulnerability1 version
- Rtl8111ep-Cg Firmwarertl8111ep-cg_firmware1 vulnerability2 versions
- Rtl8152b Firmwarertl8152b_firmware1 vulnerability6 versions
- Rtl8153 Firmwarertl8153_firmware1 vulnerability6 versions
- Rtl8153b Firmwarertl8153b_firmware1 vulnerability6 versions
- Rtl8154 Firmwarertl8154_firmware1 vulnerability6 versions
- Rtl8154b Firmwarertl8154b_firmware1 vulnerability6 versions
- Rtl8156 Firmwarertl8156_firmware1 vulnerability6 versions
- Rtl8156b Firmwarertl8156b_firmware1 vulnerability6 versions
- Rtl8192er Firmwarertl8192er_firmware1 vulnerability1 version
- Rtl8196d Firmwarertl8196d_firmware1 vulnerability1 version
- Rtl8710af Firmwarertl8710af_firmware1 vulnerability1 version
- Rtl8711af Firmwarertl8711af_firmware1 vulnerability1 version
- Rtl8711am Firmwarertl8711am_firmware1 vulnerability1 version
This directory lists the 34 Realtek products with at least one tracked version, of 81 in our catalogue.
Running Realtek? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Realtek SDK contains an improper input validation vulnerability in the miniigd SOAP service that allows remote attackers to execute malicious code via a crafted NewInternalClient request.
- Matched to
- Realtek SDK on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 71 published vulnerabilities across 81 products and 92 versions from Realtek. The most recent Realtek flaw added to the known-exploited list is CVE-2014-8361, on 18 September 2023.
3 Realtek vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2014-8361, CVE-2021-35394 and CVE-2021-35395. The full list is on this page.
Rtl819x Jungle Software Development Kit, with 23 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Realtek products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.