Realtek Jungle SDK Vulnerability (CVE-2021-35394) Still Actively being Exploited in the Wild

FortiGuard Labs has observed threat actors continuing to exploit an arbitrary command injection vulnerability in Realtek Jungle SDK (CVE-2021-35394). Successful exploitation of this vulnerability allows a remote attacker to execute arbitrary code on vulnerable devices, leading to system compromise. Realtek Jungle SDK based IoT devices are available from multiple vendors.Why is this Significant?This is significant because FortiGuard Labs is still detecting high counts (upwards of 6,000 devices per day) of CVE-2021-35394 being exploited in the wild even after a patch …

code command command injection compromise cve cve-2021-35394 devices exploit exploitation exploited high injection iot iot devices labs realtek realtek jungle sdk sdk system threat threat actors vendors vulnerability vulnerable