[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fnymFRWWtRb50_0Z2S6xbdDLW3_NhmsHDIvFGqGEj_RE":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":294,"kevVulnerabilities":344,"topProductsByCves":359,"seoMetadata":370,"meta":379},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":293},26691,"realtek",81,71,3,92,"2025-09-02","r",[16,22,28,32,36,39,44,48,52,55,59,62,66,70,74,78,81,84,87,90,93,98,101,104,107,110,113,117,120,124,128,132,135,138,141,145,149,153,157,160,163,166,169,172,175,178,181,184,187,191,194,197,200,204,207,210,213,216,220,223,227,230,233,237,241,244,247,250,253,256,260,263,266,269,272,275,278,281,284,287,290],{"id":17,"product_name":18,"version_count":11,"cve_count":19,"kev_count":20,"last_cve_update":21},136409,"rtl819x_jungle_software_development_kit",23,2,"2024-07-08",{"id":23,"product_name":24,"version_count":25,"cve_count":26,"kev_count":25,"last_cve_update":27},136401,"rtl8195a",0,7,"2021-06-04",{"id":29,"product_name":30,"version_count":31,"cve_count":26,"kev_count":25,"last_cve_update":27},136402,"rtl8195a_firmware",1,{"id":33,"product_name":34,"version_count":25,"cve_count":35,"kev_count":25,"last_cve_update":13},136422,"rtl8811au",5,{"id":37,"product_name":38,"version_count":25,"cve_count":35,"kev_count":25,"last_cve_update":13},136433,"wi-fi_usb_driver",{"id":40,"product_name":41,"version_count":25,"cve_count":42,"kev_count":25,"last_cve_update":43},136430,"rtsuer",4,"2024-07-02",{"id":45,"product_name":46,"version_count":31,"cve_count":42,"kev_count":25,"last_cve_update":47},136431,"rtsupx_usb_utility_driver","2021-11-02",{"id":49,"product_name":50,"version_count":25,"cve_count":42,"kev_count":25,"last_cve_update":51},136358,"bluetooth_mesh_software_development_kit","2022-08-30",{"id":53,"product_name":54,"version_count":25,"cve_count":42,"kev_count":25,"last_cve_update":43},136429,"rtsper",{"id":56,"product_name":57,"version_count":20,"cve_count":42,"kev_count":25,"last_cve_update":58},136404,"rtl8195am_firmware","2022-09-27",{"id":60,"product_name":61,"version_count":25,"cve_count":42,"kev_count":25,"last_cve_update":58},136403,"rtl8195am",{"id":63,"product_name":64,"version_count":31,"cve_count":20,"kev_count":25,"last_cve_update":65},136372,"rtk_11n_ap_firmware","2020-01-27",{"id":67,"product_name":68,"version_count":11,"cve_count":20,"kev_count":25,"last_cve_update":69},136376,"rtl8111fp-cg_firmware","2022-11-29",{"id":71,"product_name":72,"version_count":25,"cve_count":20,"kev_count":31,"last_cve_update":73},136368,"realtek_jungle_sdk","2021-08-16",{"id":75,"product_name":76,"version_count":25,"cve_count":20,"kev_count":25,"last_cve_update":77},136364,"hd_audio_codec_drivers","2008-04-25",{"id":79,"product_name":80,"version_count":25,"cve_count":20,"kev_count":31,"last_cve_update":73},136365,"jungle_sdk",{"id":82,"product_name":83,"version_count":25,"cve_count":20,"kev_count":25,"last_cve_update":65},136371,"rtk_11n_ap",{"id":85,"product_name":86,"version_count":25,"cve_count":20,"kev_count":25,"last_cve_update":69},136375,"rtl8111fp-cg",{"id":88,"product_name":89,"version_count":25,"cve_count":20,"kev_count":25,"last_cve_update":27},136414,"rtl8710c_firmware",{"id":91,"product_name":92,"version_count":25,"cve_count":20,"kev_count":25,"last_cve_update":27},136413,"rtl8710c",{"id":94,"product_name":95,"version_count":96,"cve_count":31,"kev_count":25,"last_cve_update":97},136385,"rtl8154b_firmware",6,"2022-06-20",{"id":99,"product_name":100,"version_count":96,"cve_count":31,"kev_count":25,"last_cve_update":97},136386,"rtl8154_firmware",{"id":102,"product_name":103,"version_count":25,"cve_count":31,"kev_count":25,"last_cve_update":97},136387,"rtl8156",{"id":105,"product_name":106,"version_count":25,"cve_count":31,"kev_count":25,"last_cve_update":97},136388,"rtl8156b",{"id":108,"product_name":109,"version_count":96,"cve_count":31,"kev_count":25,"last_cve_update":97},136389,"rtl8156b_firmware",{"id":111,"product_name":112,"version_count":96,"cve_count":31,"kev_count":25,"last_cve_update":97},136394,"rtl8156_firmware",{"id":114,"product_name":115,"version_count":25,"cve_count":31,"kev_count":25,"last_cve_update":116},136396,"rtl8192er","2020-09-30",{"id":118,"product_name":119,"version_count":31,"cve_count":31,"kev_count":25,"last_cve_update":116},136397,"rtl8192er_firmware",{"id":121,"product_name":122,"version_count":42,"cve_count":31,"kev_count":25,"last_cve_update":123},136436,"xpon_software_development_kit","2023-01-03",{"id":125,"product_name":126,"version_count":31,"cve_count":31,"kev_count":25,"last_cve_update":127},136357,"audio_driver_firmware","2017-11-13",{"id":129,"product_name":130,"version_count":25,"cve_count":31,"kev_count":25,"last_cve_update":131},136359,"ecos_msdk","2022-08-01",{"id":133,"product_name":134,"version_count":31,"cve_count":31,"kev_count":25,"last_cve_update":131},136360,"ecos_msdk_firmware",{"id":136,"product_name":137,"version_count":25,"cve_count":31,"kev_count":25,"last_cve_update":131},136361,"ecos_rsdk",{"id":139,"product_name":140,"version_count":31,"cve_count":31,"kev_count":25,"last_cve_update":131},136362,"ecos_rsdk_firmware",{"id":142,"product_name":143,"version_count":25,"cve_count":31,"kev_count":25,"last_cve_update":144},136363,"hda_driver","2021-07-07",{"id":146,"product_name":147,"version_count":31,"cve_count":31,"kev_count":25,"last_cve_update":148},136366,"ndis","2020-02-12",{"id":150,"product_name":151,"version_count":31,"cve_count":31,"kev_count":25,"last_cve_update":152},136369,"realtek_media_player","2008-12-19",{"id":154,"product_name":155,"version_count":25,"cve_count":31,"kev_count":31,"last_cve_update":156},136370,"realtek_sdk","2015-05-01",{"id":158,"product_name":159,"version_count":25,"cve_count":31,"kev_count":25,"last_cve_update":69},136373,"rtl8111ep-cg",{"id":161,"product_name":162,"version_count":20,"cve_count":31,"kev_count":25,"last_cve_update":69},136374,"rtl8111ep-cg_firmware",{"id":164,"product_name":165,"version_count":25,"cve_count":31,"kev_count":25,"last_cve_update":97},136377,"rtl8152b",{"id":167,"product_name":168,"version_count":96,"cve_count":31,"kev_count":25,"last_cve_update":97},136378,"rtl8152b_firmware",{"id":170,"product_name":171,"version_count":25,"cve_count":31,"kev_count":25,"last_cve_update":97},136379,"rtl8153",{"id":173,"product_name":174,"version_count":25,"cve_count":31,"kev_count":25,"last_cve_update":97},136380,"rtl8153b",{"id":176,"product_name":177,"version_count":96,"cve_count":31,"kev_count":25,"last_cve_update":97},136381,"rtl8153b_firmware",{"id":179,"product_name":180,"version_count":96,"cve_count":31,"kev_count":25,"last_cve_update":97},136382,"rtl8153_firmware",{"id":182,"product_name":183,"version_count":25,"cve_count":31,"kev_count":25,"last_cve_update":97},136383,"rtl8154",{"id":185,"product_name":186,"version_count":25,"cve_count":31,"kev_count":25,"last_cve_update":97},136384,"rtl8154b",{"id":188,"product_name":189,"version_count":25,"cve_count":31,"kev_count":25,"last_cve_update":190},136419,"rtl8723de","2021-04-08",{"id":192,"product_name":193,"version_count":31,"cve_count":31,"kev_count":25,"last_cve_update":190},136420,"rtl8723de_firmware",{"id":195,"product_name":196,"version_count":25,"cve_count":31,"kev_count":25,"last_cve_update":116},136423,"rtl8812ar",{"id":198,"product_name":199,"version_count":31,"cve_count":31,"kev_count":25,"last_cve_update":116},136424,"rtl8812ar_firmware",{"id":201,"product_name":202,"version_count":25,"cve_count":31,"kev_count":25,"last_cve_update":203},136425,"rtl8812au","2023-08-22",{"id":205,"product_name":206,"version_count":31,"cve_count":31,"kev_count":25,"last_cve_update":203},136426,"rtl8812au_firmware",{"id":208,"product_name":209,"version_count":25,"cve_count":31,"kev_count":25,"last_cve_update":116},136427,"rtl8881an",{"id":211,"product_name":212,"version_count":31,"cve_count":31,"kev_count":25,"last_cve_update":116},136428,"rtl8881an_firmware",{"id":214,"product_name":215,"version_count":11,"cve_count":31,"kev_count":25,"last_cve_update":123},136432,"usdk",{"id":217,"product_name":218,"version_count":25,"cve_count":31,"kev_count":25,"last_cve_update":219},136434,"xpon_rtl9601d","2021-03-25",{"id":221,"product_name":222,"version_count":31,"cve_count":31,"kev_count":25,"last_cve_update":219},136435,"xpon_rtl9601d_software_development_kit",{"id":224,"product_name":225,"version_count":25,"cve_count":31,"kev_count":25,"last_cve_update":226},136356,"adsl_router_soc_firmware","2020-06-08",{"id":228,"product_name":229,"version_count":25,"cve_count":31,"kev_count":25,"last_cve_update":116},136405,"rtl8196d",{"id":231,"product_name":232,"version_count":31,"cve_count":31,"kev_count":25,"last_cve_update":116},136406,"rtl8196d_firmware",{"id":234,"product_name":235,"version_count":25,"cve_count":31,"kev_count":25,"last_cve_update":236},136410,"rtl819x_software_development_kit","2022-07-28",{"id":238,"product_name":239,"version_count":25,"cve_count":31,"kev_count":25,"last_cve_update":240},136411,"rtl8710af","2020-07-06",{"id":242,"product_name":243,"version_count":31,"cve_count":31,"kev_count":25,"last_cve_update":240},136412,"rtl8710af_firmware",{"id":245,"product_name":246,"version_count":25,"cve_count":31,"kev_count":25,"last_cve_update":240},136415,"rtl8711af",{"id":248,"product_name":249,"version_count":31,"cve_count":31,"kev_count":25,"last_cve_update":240},136416,"rtl8711af_firmware",{"id":251,"product_name":252,"version_count":25,"cve_count":31,"kev_count":25,"last_cve_update":240},136417,"rtl8711am",{"id":254,"product_name":255,"version_count":31,"cve_count":31,"kev_count":25,"last_cve_update":240},136418,"rtl8711am_firmware",{"id":257,"product_name":258,"version_count":25,"cve_count":25,"kev_count":25,"last_cve_update":259},136400,"rtl8194ar",null,{"id":261,"product_name":262,"version_count":96,"cve_count":25,"kev_count":25,"last_cve_update":259},136393,"rtl8156bs_firmware",{"id":264,"product_name":265,"version_count":25,"cve_count":25,"kev_count":25,"last_cve_update":259},136390,"rtl8156bg",{"id":267,"product_name":268,"version_count":25,"cve_count":25,"kev_count":25,"last_cve_update":259},136407,"rtl8196e",{"id":270,"product_name":271,"version_count":25,"cve_count":25,"kev_count":25,"last_cve_update":259},136408,"rtl8197f",{"id":273,"product_name":274,"version_count":25,"cve_count":25,"kev_count":25,"last_cve_update":259},136399,"rtl8192eu",{"id":276,"product_name":277,"version_count":11,"cve_count":25,"kev_count":25,"last_cve_update":259},136367,"realtek_ac\\'97_audio",{"id":279,"product_name":280,"version_count":25,"cve_count":25,"kev_count":25,"last_cve_update":259},136392,"rtl8156bs",{"id":282,"product_name":283,"version_count":96,"cve_count":25,"kev_count":25,"last_cve_update":259},136391,"rtl8156bg_firmware",{"id":285,"product_name":286,"version_count":25,"cve_count":25,"kev_count":25,"last_cve_update":259},136398,"rtl8192es",{"id":288,"product_name":289,"version_count":25,"cve_count":25,"kev_count":25,"last_cve_update":259},136395,"rtl8192ee",{"id":291,"product_name":292,"version_count":25,"cve_count":25,"kev_count":25,"last_cve_update":259},136421,"rtl8762ekf-evb","Realtek is a technology vendor with 81 tracked products and 71 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[295,302,306,310,317,321,325,331,335,339],{"cveId":296,"description":297,"publishedDate":156,"cvssScore":298,"cvssVersion":299,"severity":300,"isKev":4,"epssScore":301},"CVE-2014-8361","The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.",9.8,"v3.1","Critical",0.99975,{"cveId":303,"description":304,"publishedDate":73,"cvssScore":298,"cvssVersion":299,"severity":300,"isKev":4,"epssScore":305},"CVE-2021-35394","Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary. The binary is affected by multiple memory corruption vulnerabilities and an arbitrary command injection vulnerability that can be exploited by remote unauthenticated attackers.",0.99877,{"cveId":307,"description":308,"publishedDate":73,"cvssScore":298,"cvssVersion":299,"severity":300,"isKev":4,"epssScore":309},"CVE-2021-35395","Realtek Jungle SDK version v2.x up to v3.4.14B provides an HTTP web server exposing a management interface that can be used to configure the access point. Two versions of this management interface exists: one based on Go-Ahead named webs and another based on Boa named boa. Both of them are affected by these vulnerabilities. Specifically, these binaries are vulnerable to the following issues: - stack buffer overflow in formRebootCheck due to unsafe copy of submit-url parameter - stack buffer overflow in formWsc due to unsafe copy of submit-url parameter - stack buffer overflow in formWlanMultipleAP due to unsafe copy of submit-url parameter - stack buffer overflow in formWlSiteSurvey due to unsafe copy of ifname parameter - stack buffer overflow in formStaticDHCP due to unsafe copy of hostname parameter - stack buffer overflow in formWsc due to unsafe copy of 'peerPin' parameter - arbitrary command execution in formSysCmd via the sysCmd parameter - arbitrary command injection in formWsc via the 'peerPin' parameter Exploitability of identified issues will differ based on what the end vendor\u002Fmanufacturer did with the Realtek SDK webserver. Some vendors use it as-is, others add their own authentication implementation, some kept all the features from the server, some remove some of them, some inserted their own set of features. However, given that Realtek SDK implementation is full of insecure calls and that developers tends to re-use those examples in their custom code, any binary based on Realtek SDK webserver will probably contains its own set of issues on top of the Realtek ones (if kept). Successful exploitation of these issues allows remote attackers to gain arbitrary code execution on the device.",0.981,{"cveId":311,"description":312,"publishedDate":73,"cvssScore":313,"cvssVersion":299,"severity":314,"isKev":315,"epssScore":316},"CVE-2021-35392","Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols. The binary is usually named wscd or mini_upnpd and is the successor to miniigd. The server is vulnerable to a heap buffer overflow that is present due to unsafe crafting of SSDP NOTIFY messages from received M-SEARCH messages ST header.",7.5,"High",false,0.8315,{"cveId":318,"description":319,"publishedDate":73,"cvssScore":298,"cvssVersion":299,"severity":300,"isKev":315,"epssScore":320},"CVE-2021-35393","Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols. The binary is usually named wscd or mini_upnpd and is the successor to miniigd. The server is vulnerable to a stack buffer overflow vulnerability that is present due to unsafe parsing of the UPnP SUBSCRIBE\u002FUNSUBSCRIBE Callback header. Successful exploitation of this vulnerability allows remote unauthenticated attackers to gain arbitrary code execution on the affected device.",0.68298,{"cveId":322,"description":323,"publishedDate":131,"cvssScore":298,"cvssVersion":299,"severity":300,"isKev":315,"epssScore":324},"CVE-2022-27255","In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data.",0.3708,{"cveId":326,"description":327,"publishedDate":152,"cvssScore":328,"cvssVersion":329,"severity":300,"isKev":315,"epssScore":330},"CVE-2008-5664","Stack-based buffer overflow in Realtek Media Player (aka Realtek Sound Manager, RtlRack, or rtlrack.exe) 1.15.0.0 allows remote attackers to execute arbitrary code via a crafted playlist (PLA) file.",9.3,"v2",0.36228,{"cveId":332,"description":333,"publishedDate":65,"cvssScore":313,"cvssVersion":299,"severity":314,"isKev":315,"epssScore":334},"CVE-2019-19822","A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) allows remote attackers to retrieve the configuration, including sensitive data (usernames and passwords). This affects TOTOLINK A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4.0, N200RE through 4.0.0, N150RT through 3.4.0, and N100RE through 3.4.0; Rutek RTK 11N AP through 2019-12-12; Sapido GR297n through 2019-12-12; CIK TELECOM MESH ROUTER through 2019-12-12; KCTVJEJU Wireless AP through 2019-12-12; Fibergate FGN-R2 through 2019-12-12; Hi-Wifi MAX-C300N through 2019-12-12; HCN MAX-C300N through 2019-12-12; T-broad GN-866ac through 2019-12-12; Coship EMTA AP through 2019-12-12; and IO-Data WN-AC1167R through 2019-12-12.",0.08669,{"cveId":336,"description":337,"publishedDate":65,"cvssScore":313,"cvssVersion":299,"severity":314,"isKev":315,"epssScore":338},"CVE-2019-19823","A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) stores cleartext administrative passwords in flash memory and in a file. This affects TOTOLINK A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4.0, N200RE through 4.0.0, N150RT through 3.4.0, and N100RE through 3.4.0; Rutek RTK 11N AP through 2019-12-12; Sapido GR297n through 2019-12-12; CIK TELECOM MESH ROUTER through 2019-12-12; KCTVJEJU Wireless AP through 2019-12-12; Fibergate FGN-R2 through 2019-12-12; Hi-Wifi MAX-C300N through 2019-12-12; HCN MAX-C300N through 2019-12-12; T-broad GN-866ac through 2019-12-12; Coship EMTA AP through 2019-12-12; and IO-Data WN-AC1167R through 2019-12-12.",0.06411,{"cveId":340,"description":341,"publishedDate":21,"cvssScore":342,"cvssVersion":299,"severity":314,"isKev":315,"epssScore":343},"CVE-2023-50381","Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This command injection is related to the `targetAPSsid` request's parameter.",7.2,0.03195,[345,350,355],{"cveId":296,"description":297,"publishedDate":156,"cvssScore":298,"cvssVersion":299,"severity":300,"isKev":4,"epssScore":301,"cisaVulnName":346,"cisaDateAdded":347,"cisaShortDescription":348,"cisaRequiredAction":349},"Realtek SDK Improper Input Validation Vulnerability","2023-09-18","Realtek SDK contains an improper input validation vulnerability in the miniigd SOAP service that allows remote attackers to execute malicious code via a crafted NewInternalClient request.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":303,"description":304,"publishedDate":73,"cvssScore":298,"cvssVersion":299,"severity":300,"isKev":4,"epssScore":305,"cisaVulnName":351,"cisaDateAdded":352,"cisaShortDescription":353,"cisaRequiredAction":354},"Realtek Jungle SDK Remote Code Execution Vulnerability","2021-12-10","RealTek Jungle SDK contains multiple memory corruption vulnerabilities which can allow an attacker to perform remote code execution.","Apply updates per vendor instructions.",{"cveId":307,"description":308,"publishedDate":73,"cvssScore":298,"cvssVersion":299,"severity":300,"isKev":4,"epssScore":309,"cisaVulnName":356,"cisaDateAdded":357,"cisaShortDescription":358,"cisaRequiredAction":354},"Realtek AP-Router SDK Buffer Overflow Vulnerability","2021-11-03","Realtek AP-Router SDK HTTP web server boa contains a buffer overflow vulnerability due to unsafe copies of some overly long parameters submitted in the form that lead to denial-of-service (DoS).",[360,361,362,363,364,365,366,367,368,369],{"id":17,"product_name":18,"version_count":11,"cve_count":19,"kev_count":20,"last_cve_update":21},{"id":23,"product_name":24,"version_count":25,"cve_count":26,"kev_count":25,"last_cve_update":27},{"id":29,"product_name":30,"version_count":31,"cve_count":26,"kev_count":25,"last_cve_update":27},{"id":33,"product_name":34,"version_count":25,"cve_count":35,"kev_count":25,"last_cve_update":13},{"id":37,"product_name":38,"version_count":25,"cve_count":35,"kev_count":25,"last_cve_update":13},{"id":40,"product_name":41,"version_count":25,"cve_count":42,"kev_count":25,"last_cve_update":43},{"id":45,"product_name":46,"version_count":31,"cve_count":42,"kev_count":25,"last_cve_update":47},{"id":49,"product_name":50,"version_count":25,"cve_count":42,"kev_count":25,"last_cve_update":51},{"id":53,"product_name":54,"version_count":25,"cve_count":42,"kev_count":25,"last_cve_update":43},{"id":56,"product_name":57,"version_count":20,"cve_count":42,"kev_count":25,"last_cve_update":58},{"title":371,"metaDescription":372,"keywords":373,"structuredData":374},"Realtek - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Realtek covering 81 products with 71 tracked vulnerabilities including 3 critical and 0 high-severity issues and 3 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Realtek vulnerabilities, Realtek security, Realtek CVE, Realtek threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Realtek KEV, Realtek exploited vulnerabilities",{"@context":375,"@type":376,"name":377,"description":372,"url":378},"https:\u002F\u002Fschema.org","Organization","Realtek","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Frealtek",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":380,"apiVersion":381},"2026-10-17T20:32:06.229Z","3.0"]