Описание
Redmi router RB03 v1.0.57 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mappings in the router.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:mi:redmi_ax6s_firmware:1.0.57:*:*:*:*:*:*:*
cpe:2.3:h:mi:redmi_ax6s:-:*:*:*:*:*:*:*
EPSS
Процентиль: 16%
0.0005
Низкий
5.2 Medium
CVSS3
Дефекты
CWE-940
Связанные уязвимости
github
больше 1 года назад
Redmi router RB03 v1.0.57 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mappings in the router.
EPSS
Процентиль: 16%
0.0005
Низкий
5.2 Medium
CVSS3
Дефекты
CWE-940