Realtek Jungle SDK Remote Code Execution Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 10/12/2021. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| rtl819x jungle software development kit | ≥ 2.0, ≤ 3.4.14b |
Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary. The binary is affected by multiple memory corruption vulnerabilities and an arbitrary command injection vulnerability that can be exploited by remote unauthenticated attackers.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free