Realtek SDK Exploit Attempt - CVE-2021-35395

Realtek is a semiconductor company that produces software development kit (SDK) firmware to enable wireless connections for various devices ranging from routers to IP cameras. Realtek SDK includes seven vulnerabilities (covered by CVE-2021-35395) that can lead to remote code execution (RCE). A majority of the vulnerabilities enable a buffer overflow in memory that can lead to RCE. The other vulnerabilities either allow command injection or unauthorized access to an interface that accepts system commands. To exploit these vulnerabilities, an attacker sends an HTTP request with a specially designed URI for a vulnerable path (such as /goform/formWsc). Depending on which vulnerability the attacker is exploiting, the HTTP request also includes a malicious payload or query parameters.