High · 7.5 CVE-2023-26320 EUVD-2023-30141GHSA-wjgc-gw8v-m4vg

Xiaomi Router external request interface vulnerability leads to stack overflow

Published Oct 11, 2023 · Updated Oct 8, 2024 · Assigned by Xiaomi

Description

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Router allows Command Injection.

Vendor	Product	Affected	Fixed
Xiaomi	Xiaomi Router	< fw version before 2023.2	fw version before 2023.2