[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZsw0rs7CYPcNXcRyF5pY24M58Y9CYGVdJ-zNrfX-VNw":3,"g5a-risk:CVE-2021-35393":129},{"success":4,"data":5,"meta":127},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":27,"epssTimeSeries":41,"severity":43,"affectedProducts":44,"affectedProductsCount":50,"references":51,"referencesCount":74,"weaknesses":75,"weaknessesCount":50,"isActivelyExploited":39,"cisaInfo":27,"otxData":27,"relatedBlogPosts":83,"seoMetadata":84,"configurations":109,"relatedVendorCves":118,"notableEvents":119},"CVE-2021-35393","What is CVE-2021-35393?","Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols. The binary is usually named wscd or mini_upnpd and is the successor to miniigd. The server is vulnerable to a stack buffer overflow vulnerability that is present due to unsafe parsing of the UPnP SUBSCRIBE\u002FUNSUBSCRIBE Callback header. Successful exploitation of this vulnerability allows remote unauthenticated attackers to gain arbitrary code execution on the affected device.","Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols. The binary is usually nam...","2021-08-16T12:15:07.23","2025-08-13T15:22:43.29",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":31,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[],[32],{"Source":17,"Type":18,"CVSSData":33,"BaseSeverity":25,"ExploitabilityScore":37,"ImpactScore":37,"ACInsufInfo":39,"ObtainAllPrivilege":39,"ObtainUserPrivilege":39,"ObtainOtherPrivilege":39,"UserInteractionRequired":39},{"Version":34,"VectorString":35,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":36,"IntegrityImpact":36,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":38,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","COMPLETE",10,"",false,0.68298,[42,42,40,40,40,40,40],0.70334,"Critical",[45],{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"realtek","rtl819x_jungle_software_development_kit","*","cpe:2.3:a:realtek:rtl819x_jungle_software_development_kit:*:*:*:*:*:*:*:*",1,[52,59,65,68,70,72],{"url":53,"source":54,"tags":55},"https:\u002F\u002Fwww.iot-inspector.com\u002Fblog\u002Fadvisory-multiple-issues-realtek-sdk-iot-supply-chain","Iot-inspector",[56,57,58],"Exploit","Third Party Advisory","Broken Link",{"url":60,"source":61,"tags":62},"https:\u002F\u002Fwww.realtek.com\u002Fen\u002Fcu-1-en\u002Fcu-1-taiwan-en","Realtek",[63,64,58],"Patch","Vendor Advisory",{"url":66,"source":61,"tags":67},"https:\u002F\u002Fwww.realtek.com\u002Fimages\u002Fsafe-report\u002FRealtek_APRouter_SDK_Advisory-CVE-2021-35392_35395.pdf",[63,64],{"url":53,"source":54,"tags":69},[56,57,58],{"url":60,"source":61,"tags":71},[63,64,58],{"url":66,"source":61,"tags":73},[63,64],6,[76],{"id":77,"name":78,"description":79,"extendedDescription":38,"status":80,"abstraction":81,"structure":82},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","Draft","Base","Simple",[],{"title":85,"metaDescription":86,"keywords":87,"canonicalUrl":88,"structuredData":89},"What is CVE-2021-35393? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-35393, a critical severity cyber security vulnerability from 2021. High exploit probability (68.3%). Realtek Jungle SDK ve...","CVE-2021-35393, CVE-2021-35393 vulnerability, CVE-2021-35393 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, realtek security, rtl819x_jungle_software_development_kit vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2021-35393",{"@context":90,"@type":91,"headline":85,"description":86,"datePublished":10,"dateModified":11,"author":92,"publisher":96,"about":100,"mainEntityOfPage":104,"articleSection":107,"keywords":108},"https:\u002F\u002Fschema.org","TechArticle",{"@type":93,"name":94,"url":95},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":93,"name":94,"url":95,"logo":97},{"@type":98,"url":99},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":101,"name":6,"description":102,"additionalType":103},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":105,"@id":106},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-35393","Cybersecurity","CVE-2021-35393, CVE-2021-35393 vulnerability, CVE-2021-35393 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[110],{"Operator":27,"Negate":27,"Nodes":111},[112],{"Operator":113,"Negate":39,"CPEMatch":114},"OR",[115],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":116,"VersionStartExcluding":27,"VersionStartIncluding":34,"VersionEndExcluding":27,"VersionEndIncluding":117},"00E83926-7610-44FA-9837-B03D386A07D5","3.4.14b",[],[120],{"id":121,"eventType":122,"eventTime":123,"details":124,"label":125,"color":126},"233fef23-1b46-47f0-a516-88c4c4ec71bc","HIGH_EPSS_DELTA","2026-06-16T04:05:37.125667+00:00","Daily EPSS score increased by 0.573 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":128,"version":34},1792269633845,{"score":130,"band":131,"action":132,"scoredAt":133},66,"Medium","Plan remediation","2026-10-16T06:51:48.554844+00:00"]