Skip to content
OpenAdvisories
Medium · 6.7 CVE-2023-26319 EUVD-2023-30140GHSA-4j9w-xhrc-q5vq

Xiaomi Router administration interface vulnerability leads command injection and stack overflow

Published Oct 11, 2023 · Updated Oct 8, 2024 · Assigned by Xiaomi

Vendor: Xiaomi Product: Xiaomi Router

Description

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Router allows Command Injection.

Affected products

VendorProductAffectedFixed
Xiaomi Xiaomi Router < fw version before 2023.2 fw version before 2023.2

References