CVE-2014-8361Vulnerability

Realtek SDK Improper Input Validation Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on 18 Sep 2023.

Reported by 3 independent sources · first reported 27 Feb 2025 by GreyNoise · last reported 5 Oct 2026

Last reported 19 days ago

CISA KEVAdded 18 Sep 2023
Fix due 9 Oct 2023
Used by ransomware: not knownCISA KEV catalogue

EPSS100.0%
higher than 99% of CVEsFIRST EPSS, as of 19 Oct 2026

What the reports say

3 reports, newest first · the exact sentence from each

“Figure 12: Self propagation via CVE-2014-8361”

Fortinet Threat ResearchVendor5 Oct 2026
ClingSTUN Linux Backdoor Abuses Public STUN Infrastructure
“Realtek SDK RCE (CVE-2014-8361)”

The Hacker NewsNews5 Oct 2026
Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2
“CVE-2014-8361 (Realtek Miniigd UPnP Worm) – 41,522 unique IPs”

GreyNoiseVendor27 Feb 2025
GreyNoise 2025 Mass Internet Exploitation Report: Attackers Are Moving Faster Than Ever — Are You Ready?

Indicators reported together

named in the same reports

c1d8e2829ea63b9d…78e908e0e6e8in 1 report
e6e113783356446a…76f095a95c4cin 1 report
145.249.115[.]184in 1 report
112.151.157[.]222in 1 report

Copy these 4 indicators · defanged

4 indicators, defanged, one per line

c1d8e2829ea63b9dc1cf2c3421a5093406adad4d6622e238376e78e908e0e6e8
e6e113783356446aef66e5296db45b244f318292af7cebc2a9bd76f095a95c4c
145.249.115[.]184
112.151.157[.]222

Also named with it: CVE-2016-20016, CVE-2021-35394, CVE-2023-26801, CVE-2023-41011, CVE-2024-3721, CVE-2025-34037, CVE-2025-67038, CVE-2024-21887, CVE-2023-46805, CVE-2016-6277, CVE-2022-37055, CVE-2023-1389, CVE-2024-10914, CVE-2018-10561, CVE-2023-30891, CVE-2016-10372

Thanks — we review every report.

Report a wrong value