CVE-2021-35394criticalunder attackCWE-78

CVE-2021-35394

Published · Updated

Follow this CVE+ Monitor Jungle Software Development Kit

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

95Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.8epss 100%
from disclosure to weapon
Published on NVDAug 16
CISA KEV+116d
Action required by CISAfederal deadline: 2021-12-24

Apply updates per vendor instructions.

In short

Realtek Jungle SDK contains a diagnostic tool (UDPServer) that allows remote attackers to inject and execute arbitrary commands without authentication. This is a critical flaw because attackers can take complete control of affected devices over the network.

Technical detail

The UDPServer binary in Realtek Jungle SDK v2.x through v3.4.14B is vulnerable to OS command injection (CWE-78) via crafted network packets. Remote unauthenticated attackers can exploit this via UDP to execute arbitrary commands with the privileges of the running process, combined with memory corruption vulnerabilities that may elevate impact.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary. The binary is affected by multiple memory corruption vulnerabilities and an arbitrary command injection vulnerability that can be exploited by remote unauthenticated attackers.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a