What is the CVSS score of CVE-2014-8361?

CVE-2014-8361 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 94.0%.

Is there a public PoC exploit available for CVE-2014-8361?

Yes, a public proof-of-concept exploit is available for CVE-2014-8361. Prioritise patching immediately. EPSS: 94.0%.

Dir 605l Firmware CVE-2014-8361

CRITICAL

2015-05-01 cve@mitre.org

RCE D-Link Dir 605l Firmware Dir 615 Firmware Dir 619l Firmware Dir 600L Firmware Aterm Dir 905L Firmware Dir 809 Firmware Dir 900L Firmware Realtek Sdk Dir 501 Firmware Dir 515 Firmware Wg1900Hp2 Firmware Wg1900Hp Firmware Wg1800Hp4 Firmware Wg1800Hp3 Firmware Wg1200Hs2 Firmware Wg1200Hp3 Firmware Wg1200Hp2 Firmware W1200Ex Firmware W1200Ex Ms Firmware Wg1200Hs Firmware Wg1200Hp Firmware Wf800Hp Firmware Wf300Hp2 Firmware Wr8165N Firmware W500P Firmware W300P Firmware Realtek

9.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Added to CISA KEV

Apr 21, 2026 - 15:31 CISA

CVE Published

May 01, 2015 - 15:59 cve.org

CRITICAL 9.8

DescriptionCVE.org

The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.

AnalysisAI

The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

Technical ContextAI

The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023. Affected products include: Dlink Dir-905L Firmware, Dlink Dir-605L Firmware, Dlink Dir-600L Firmware, Dlink Dir-619L Firmware, Dlink Dir-809 Firmware. Version information: through 2023..

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Dir 605l Firmware

View all

CVE-2017-9675 HIGH Act Now POC

7.5 Jun 15

On D-Link DIR-605L devices, firmware before 2.08UIBetaB01.bin allows an unauthenticated GET request to trigger a reboot.

CVE-2023-29961 CRITICAL Act Now POC

9.8 May 16

D-Link DIR-605L firmware version 1.17B01 BETA is vulnerable to stack overflow via /goform/formTcpipSetup,. Rated critica

CVE-2023-24352 CRITICAL Act Now POC

9.8 Feb 10

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /gofo

CVE-2023-24351 CRITICAL Act Now POC

9.8 Feb 10

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the FILECODE parameter at /gof

CVE-2023-24350 CRITICAL Act Now POC

9.8 Feb 10

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the config.smtp_email_subject

CVE-2023-24349 CRITICAL Act Now POC

9.8 Feb 10

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /gofo

CVE-2023-24348 CRITICAL Act Now POC

9.8 Feb 10

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /gofo

CVE-2018-20056 CRITICAL Act Now POC

9.8 Dec 11

An issue was discovered in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 and DIR-605L Rev.B 2.12B1 devices. Rated critical se

CVE-2024-37630 HIGH This Week POC

8.8 Jun 13

D-Link DIR-605L v2.13B01 was discovered to contain a hardcoded password vulnerability in /etc/passwd, which allows attac

CVE-2023-24347 HIGH This Week POC

8.8 Feb 10

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /gofo

CVE-2023-24346 HIGH This Week POC

8.8 Feb 10

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the wan_connected parameter at

CVE-2023-24345 HIGH This Week POC

8.8 Feb 10

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /gofo

Same technique RCE

View all

CVE-2021-44228 CRITICAL POC

10.0

CVE-2017-7269 CRITICAL POC

9.8

CVE-2022-47966 CRITICAL POC

9.8

CVE-2012-4681 CRITICAL POC

9.8

CVE-2023-3519 CRITICAL POC

9.8

CVE-2015-5119 CRITICAL POC

9.8

CVE-2016-4117 CRITICAL POC

9.8

CVE-2015-3113 CRITICAL POC

9.8

CVE-2014-8361 vulnerability details – vuln.today

Back

Dir 605l Firmware CVE-2014-8361

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

More in Dir 605l Firmware

Same technique RCE

Share

External POC / Exploit Code