Description
OS command injection in the AP mode settings feature in /cgi-bin/luci /api/misystem/set_router_wifiap on Xiaomi R3D before 2.26.4 devices allows an attacker to execute any command via crafted JSON data.
Unscored
CVE-2018-14060
EUVD-2018-5983GHSA-7rfw-27hp-w56j
OS command injection in the AP mode settings feature in /cgi-bin/luci /api/misystem/set_router_wifiap on Xiaomi R3D before 2.26.4 devices a…
Published Jul 15, 2018 · Updated Aug 5, 2024 · Assigned by mitre