Skip to content
OpenAdvisories
Medium · 6.4 CVE-2024-45348 EUVD-2024-41445GHSA-jpc2-3rcq-mchp

Xiaomi Router AX9000 has a post-authorization command injection vulnerability

Published Sep 23, 2024 · Updated Mar 27, 2025 · Assigned by Xiaomi

Description

Xiaomi Router AX9000 has a post-authorization command injection vulnerability. This vulnerability is caused by the lack of validation of user input, and an attacker can exploit this vulnerability to execute arbitrary code.

Affected products

VendorProductAffectedFixed
Xiaomi Xiaomi Router AX9000 1.0.173 —

References