Skip to content
Noroxi

Realtek records

77 published records for vendor realtek.

Researcher profile

Entered KEV
3 · 3.9%
Weaponized
4 · 5.2%
Pre-auth RCE
8
With a fix record
0%
Median publish → KEV
116 days

Records by year

  1. 17
  2. 20
  3. 21
  4. 22
  5. 23
  6. 24
  7. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

77 records
  • CVE-2014-8361
    99Now

    The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploi

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    realtek · realtek sdkMay 1, 2015

  • CVE-2021-35394
    99Now

    Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary.

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    realtek · rtl819x jungle software development kitAug 16, 2021

  • CVE-2021-35395
    98Now

    Realtek Jungle SDK version v2.x up to v3.4.14B provides an HTTP web server exposing a management interface that can be used to configure the

    CriticalCVSS 9.8KEVWeaponizedEPSS 98%

    realtek · rtl819x jungle software development kitAug 16, 2021

  • CVE-2021-35393
    59Plan

    Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols.

    CriticalCVSS 9.8No exploitEPSS 68%

    realtek · rtl819x jungle software development kitAug 16, 2021

  • CVE-2021-35392
    55Plan

    Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols.

    HighCVSS 7.5Proof of conceptEPSS 83%

    realtek · rtl819x jungle software development kitAug 16, 2021

  • CVE-2022-27255
    50Plan

    In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow.

    CriticalCVSS 9.8Proof of conceptEPSS 37%

    realtek · ecos rsdk firmwareAug 1, 2022

  • CVE-2008-5664
    48Plan

    Stack-based buffer overflow in Realtek Media Player (aka Realtek Sound Manager, RtlRack, or rtlrack.exe) 1.15.0.0 allows remote attackers to

    CriticalCVSS 9.3WeaponizedEPSS 36%

    realtek · realtek media playerDec 18, 2008

  • CVE-2021-27372
    40Plan

    Realtek xPON RTL9601D SDK 1.9 stores passwords in plaintext which may allow attackers to possibly gain access to the device with root permis

    CriticalCVSS 9.8No exploitEPSS 1%

    realtek · xpon rtl9601d software development kitMar 25, 2021

  • CVE-2021-39306
    39Monitor

    A stack buffer overflow was discovered on Realtek RTL8195AM device before 2.0.10, it exists in the client code when an attacker sends a big

    CriticalCVSS 9.8No exploitEPSS 1%

    realtek · rtl8195am firmwareDec 22, 2021

  • CVE-2021-43573
    39Monitor

    A buffer overflow was discovered on Realtek RTL8195AM devices before 2.0.10.

    CriticalCVSS 9.8No exploitEPSS 1%

    realtek · rtl8195am firmwareNov 11, 2021

  • CVE-2022-29558
    35Monitor

    Realtek rtl819x-SDK before v3.6.1 allows command injection over the web interface.

    HighCVSS 8.8No exploitEPSS 1%

    realtek · rtl819x software development kitJul 28, 2022

  • CVE-2024-40431
    35Monitor

    A lack of input validation in Realtek SD card reader driver before 10.0.26100.21374 through the implementation of the IOCTL_SCSI_PASS_THROUG

    HighCVSS 8.8Proof of conceptEPSS 1%

    Oct 23, 2024

  • CVE-2020-12773
    35Monitor

    Realtek ADSL/PON Modem SoC - Security Misconfiguration

    HighCVSS 8.8No exploitEPSS 1%

    realtek · adsl router soc firmwareJun 8, 2020

  • CVE-2023-47677
    35Monitor

    A cross-site request forgery (csrf) vulnerability exists in the boa CSRF protection functionality of Realtek rtl819x Jungle SDK v3.4.11.

    HighCVSS 8.8No exploitEPSS 0%

    realtek · rtl819x jungle software development kitJul 8, 2024

  • CVE-2025-8299
    35Monitor

    Realtek rtl81xx SDK Wi-Fi Driver MgntActSet_TEREDO_SET_RS_PACKET Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    realtek · wi-fi usb driverSep 2, 2025

  • CVE-2025-8300
    35Monitor

    Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    realtek · wi-fi usb driverSep 2, 2025

  • CVE-2025-8302
    35Monitor

    Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    realtek · wi-fi usb driverSep 2, 2025

  • CVE-2019-19822
    33Monitor

    A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) allows remote attackers to retrieve the co

    HighCVSS 7.5Proof of conceptEPSS 8%

    realtek · rtk 11n ap firmwareJan 27, 2020

  • CVE-2020-25855
    33Monitor

    The function AES_UnWRAP() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not

    HighCVSS 8.1No exploitEPSS 2%

    realtek · rtl8195a firmwareFeb 3, 2021

  • CVE-2020-25854
    33Monitor

    The function DecWPA2KeyData() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does

    HighCVSS 8.1No exploitEPSS 2%

    realtek · rtl8195a firmwareFeb 3, 2021

  • CVE-2020-25856
    33Monitor

    The function DecWPA2KeyData() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does

    HighCVSS 8.1No exploitEPSS 2%

    realtek · rtl8195a firmwareFeb 3, 2021

  • CVE-2020-27302
    33Monitor

    A stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to remote code execution via the "memcpy" function, when

    HighCVSS 8.0No exploitEPSS 2%

    realtek · rtl8710c firmwareJun 4, 2021

  • CVE-2020-27301
    33Monitor

    A stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to remote code execution via the "AES_UnWRAP" function,

    HighCVSS 8.0Proof of conceptEPSS 1%

    realtek · rtl8710c firmwareJun 4, 2021

  • CVE-2024-33224
    33Monitor

    An issue in the component rtkio64.sys of Realtek Semiconductor Corp Realtek lO Driver v1.008.0823.2017 allows attackers to escalate privileg

    HighCVSS 8.4No exploitEPSS 0%

    May 22, 2024

  • CVE-2019-19823
    32Monitor

    A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) stores cleartext administrative passwords

    HighCVSS 7.5Proof of conceptEPSS 6%

    realtek · rtk 11n ap firmwareJan 27, 2020