Critical severity9.8CISA KEVNVD Advisory· Published Aug 16, 2021· Updated Jun 17, 2026
CVE-2021-35394
CVE-2021-35394
Description
Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary. The binary is affected by multiple memory corruption vulnerabilities and an arbitrary command injection vulnerability that can be exploited by remote unauthenticated attackers.
Affected products
4- cpe:2.3:a:realtek:rtl819x_jungle_software_development_kit:*:*:*:*:*:*:*:*Range: >=2.0,<=3.4.14b
- Realtek/Jungle SDKdescription
- Range: <=3.4.14B
Patches
Vulnerability mechanics
References
5- www.realtek.com/en/cu-1-en/cu-1-taiwan-ennvdBroken LinkPatchVendor Advisory
- www.realtek.com/images/safe-report/Realtek_APRouter_SDK_Advisory-CVE-2021-35392_35395.pdfnvdPatchVendor Advisory
- www.iot-inspector.com/blog/advisory-multiple-issues-realtek-sdk-iot-supply-chainnvdBroken LinkExploitThird Party Advisory
- www.securityfocus.com/archive/1/534765nvdBroken LinkThird Party AdvisoryVDB Entry
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.