Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9fcg-r3gc-jvhf

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

There is command injection in the addMeshNode interface of xqnetwork.lua, which leads to command execution under administrator authority on Xiaomi router AX3600 with rom versionrom< 1.1.12

There is command injection in the addMeshNode interface of xqnetwork.lua, which leads to command execution under administrator authority on Xiaomi router AX3600 with rom versionrom< 1.1.12

EPSS

Процентиль: 88%
0.0381
Низкий

Дефекты

CWE-77

Связанные уязвимости

CVSS3: 9.8
nvd
больше 4 лет назад

There is command injection in the addMeshNode interface of xqnetwork.lua, which leads to command execution under administrator authority on Xiaomi router AX3600 with rom versionrom< 1.1.12

EPSS

Процентиль: 88%
0.0381
Низкий

Дефекты

CWE-77