CVE-2021-35395

CVE-2021-35395 is a critical vulnerability affecting Realtek Jungle SDK versions up to v3.4.14B, specifically impacting the HTTP web server's management interface (both Go-Ahead and Boa versions). It encompasses multiple stack buffer overflows and arbitrary command execution/injection flaws due to unsafe parameter handling. Successful exploitation allows remote attackers to achieve arbitrary code execution on affected devices. This vulnerability carries a CVSS score of 9.8 (Critical), indicating a severe risk. It can be exploited remotely without authentication or user interaction, leading to complete compromise of confidentiality, integrity, and availability. The exploitability may vary based on vendor-specific implementations of the Realtek SDK web server. CVE-2021-35395 is actively exploited in the wild, as confirmed by its presence in CISA's KEV catalog and extensive media coverage detailing its use by malware like Zerobot. While no Metasploit modules or ExploitDB entries are available, Nuclei templates exist, and the vulnerability has garnered significant community discussion.