Markets
1 min read0 views
CVE-2021-35394: Command injection in MP Daemon diagnostic service (Update: proof of concept on GitHub published)
Update: proof of concept on GitHub published. The Realtek Jungle SDK, used in certain router and networking device firmware, includes a diagnostic component called "MP Daemon" (typically built as the "UDPServer" binary) that is affected by memory corruption and command injection flaws. These flaws could allow a remote attacker who is not logged in to crash the service or run…
Reading Level🟢Beginner
Listen to this article
Update: proof of concept on GitHub published. The Realtek Jungle SDK, used in certain router and networking device firmware, includes a diagnostic component called "MP Daemon" (typically built as the "UDPServer" binary) that is affected by memory corruption and command injection flaws. These flaws could allow a remote attacker who is not logged in to crash the service or run arbitrary commands on the affected device.
Original Source
cve.now CISA KEVLike this article
Share this article
Share:

