CVE-2021-35393

Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols. The binary is usually named wscd or mini_upnpd and is the successor to miniigd. The server is vulnerable to a stack buffer overflow vulnerability that is present due to unsafe parsing of the UPnP SUBSCRIBE/UNSUBSCRIBE Callback header. Successful exploitation of this vulnerability allows remote unauthenticated attackers to gain arbitrary code execution on the affected device.

• CWE-787

• https://www.iot-inspector.com/blog/advisory-multiple-issues-realtek-sdk-iot-supply-chainBroken Link, Exploit, Third Party Advisory
• https://www.realtek.com/en/cu-1-en/cu-1-taiwan-enBroken Link, Patch, Vendor Advisory
• https://www.realtek.com/images/safe-report/Realtek_APRouter_SDK_Advisory-CVE-2021-35392_35395.pdfPatch, Vendor Advisory
• https://www.iot-inspector.com/blog/advisory-multiple-issues-realtek-sdk-iot-supply-chainBroken Link, Exploit, Third Party Advisory
• https://www.realtek.com/en/cu-1-en/cu-1-taiwan-enBroken Link, Patch, Vendor Advisory
• https://www.realtek.com/images/safe-report/Realtek_APRouter_SDK_Advisory-CVE-2021-35392_35395.pdfPatch, Vendor Advisory

Published

Aug 16, 2021

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-35380A Directory Traversal vulnerability exists in Solari di Udin…7.5
• CVE-2021-35387Hospital Management System v 4.0 is vulnerable to SQL Inject…8.8
• CVE-2021-35388Hospital Management System v 4.0 is vulnerable to Cross Site…5.4
• CVE-2021-3539EspoCRM 6.1.6 and prior suffers from a persistent (type II) …5.4
• CVE-2021-35391Server Side Request Forgery vulnerability found in Deskpro S…7.2
• CVE-2021-35392Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'W…7.5
• CVE-2021-35394Realtek Jungle SDK version v2.x up to v3.4.14B provides a di…9.8
• CVE-2021-35395Realtek Jungle SDK version v2.x up to v3.4.14B provides an H…9.8
• CVE-2021-35397A path traversal vulnerability in the static router for Drog…7.5
• CVE-2021-3540By abusing the 'install rpm info detail' command, an attacke…7.2
• CVE-2021-35402PROLiNK PRC2402M 20190909 before 2021-06-13 allows live_api.…10
• CVE-2021-3541A flaw was found in libxml2. Exponential entity expansion at…6.5