Fixed Intel

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Dec 24, 2021

CVE-2021-35394

High
EPSS 93.8%CISA KEV
Realtek/Jungle Software Development Kit (SDK)

Description

RealTek Jungle SDK contains multiple memory corruption vulnerabilities which can allow an attacker to perform remote code execution.

EPSS — Exploit Probability

93.8%

Higher than 99.9% of all CVEs

Required Action

https://nvd.nist.gov/vuln/detail/CVE-2021-35394

Risk Assessment

HIGH
In CISA KEV
High EPSS

Details

Severity
High
EPSS
93.8%
CISA KEV
Yes
Ransomware
Unknown
Articles
0

Timeline

Published

Dec 10, 2021

Added to KEV

Dec 10, 2021

Remediation Due

Dec 24, 2021

Affected Product

Realtek

Jungle Software Development Kit (SDK)

View all Realtek CVEs