CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-08-16
Realtek Jungle SDK MP Daemon (UDPServer) Remote Code Execution and Command Injection Vulnerability (CVE-2021-35394) Analysis & Mitigation Guide
[Affected Scope] Embedded IoT devices utilizing Realtek Jungle SDK versions v2.x through v3.4.14B containing the 'MP Daemon' (UDPServer) diagnostic tool
[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges or trigger memory corruption on the target device
[Mitigation] Apply the official vendor firmware patch, disable the UDPServer service, or restrict external access to the diagnostic UDP ports using firewall rules