VULNERABILITY INTELLIGENCE
CVE-2021-35394
CVSS score9.8 CRITICAL
EPSS probability99.88%
CISA KEVKnown exploited vulnerability
Published2021-08-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Known Exploited Vulnerability
Realtek Jungle SDK Remote Code Execution Vulnerability
Vendor / product: Realtek / Jungle Software Development Kit (SDK)
Description
Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary. The binary is affected by multiple memory corruption vulnerabilities and an arbitrary command injection vulnerability that can be exploited by remote unauthenticated attackers.
Weakness classification
- nvd@nist.gov: NVD-CWE-Other
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-78
Primary references
- cve@mitre.org — Broken Link, Exploit, Third Party Advisory
- cve@mitre.org — Broken Link, Patch, Vendor Advisory
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org — Broken Link, Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Exploit, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Third Party Advisory, VDB Entry
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource