Field Assessment
AI analysis pending.
Exhibit — Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Detected Signals
exploit
External Security References
Note: these links are listed for security research and verification purposes only.
Cross-Reference — CISA KEV
Status: This CVE is listed in CISA's Known Exploited Vulnerabilities catalog.
Ransomware use: Unknown
Added to KEV: 2023-09-18
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE
CVE-2014-8361
Severity
CRITICAL
CVSS
9.8
EPSS
99.98%
Original Filing — NVD Description
The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.