CVE-2024-45348

Xiaomi Router AX9000 has a post-authorization command injection vulnerability PUBLISHED

Description (CNA)

Xiaomi Router AX9000 has a post-authorization command injection vulnerability. This vulnerability is caused by the lack of validation of user input, and an attacker can exploit this vulnerability to execute arbitrary code.

Affected (CNA)

Vendor / product	Versions
Xiaomi / Xiaomi Router AX9000	affected 1.0.173

CWE

CWE-77

References

https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=547

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.