CRITICAL

CVE-2021-35393

CVSS v3

9.8

CRITICAL

EPSS Score

12.2%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols. The binary is usually named wscd or mini_upnpd and is the successor to miniigd. The server is vulnerable to a stack buffer overflow vulnerability that is present due to unsafe parsing of the UPnP SUBSCRIBE/UNSUBSCRIBE Callback header. Successful exploitation of this vulnerability allows remote unauthenticated attackers to gain arbitrary code execution on the affected device.

Technical details

Published
8/16/2021

Frequently asked questions

What is CVE-2021-35393?

Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols. The binary is usually named wscd or mini_upnpd and is the successor to miniigd. The server is vulnerable to a stack buffer overflow vulnerability that is present due to unsafe parsing of the UPnP SUBSCRIBE/UNSUBSCRIBE Callback header. Successful exploitation of this vulnerability allows remote unauthenticated attackers to gain arbitrary code execution on the affected device.

Is CVE-2021-35393 actively exploited?

Active exploitation of CVE-2021-35393 has not been confirmed. The EPSS score is 12.2%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2021-35393?

CVE-2021-35393 has a CVSS v3 base score of 9.8 (CRITICAL severity).

Is CVE-2021-35393 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.