Overview

On August 16, 2021, D-Link became aware of the public disclosure from IoT Inspector of multiple security vulnerabilities in the Realtek Chipset RTL8xxx software development kit (SDK).

Realtek chipsets are found in many embedded devices in the IoT space. RTL8xxx SoCs – which provide wireless capabilities – are very common. We therefore decided to spend time identifying binaries running on the RTL819xD on our target device, which expose services over the network and are provided by Realtek themselves. Such binaries are packaged as part of the Realtek SDK, which is developed by Realtek and provided to vendors and manufacturers who use the RTL8xxx SoCs.

D-Link takes the issues of network security and user privacy very seriously. We have a dedicated task force and product management team on call to address evolving security issues and implement appropriate security measures.

D-Link is investigating these reported security issues and if any D-Link Brand WiFi products are affected by these vulnerable.  The latest information regarding this security vulnerability is below. D-Link recommends checking back regularly and keep your device(s) up to date.

Report

              - Realtek Vulnerability Report: Link to Post

                 - IoT Inspector: Link to Post

              - HelpNetSecurity

                 - Tech Radar

  - Duo.com

 Details

      Affected Versions

          rtl819x-SDK-v3.2.x Series
            rtl819x-SDK-v3.4.x Series
            rtl819x-SDK-v3.4T Series
            rtl819x-SDK-v3.4T-CT Series
            rtl819x-eCos-v1.5.x Series

      CVE ID
           CVE-2021-35392 (‘WiFi Simple Config’ stack buffer overflow via UPnP)
           CVE-2021-35393 (‘WiFi Simple Config’ heap buffer overflow via SSDP)
           CVE-2021-35394 (MP Daemon diagnostic tool command injection)
           CVE-2021-35395 (management web interface multiple vulnerabilities)

Affected Models