Lucene search

[email protected]CVE-2023-26318

HistoryOct 11, 2023 - 7:15 a.m.

CVE-2023-26318

2023-10-1107:15:09

CWE-120

[email protected]

web.nvd.nist.gov

cve-2023-26318

buffer copy

input size checking

classic buffer overflow

xiaomi router

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.4%

JSON

Buffer Copy without Checking Size of Input (‘Classic Buffer Overflow’) vulnerability in Xiaomi Xiaomi Router allows Overflow Buffers.

Affected configurations

NVD

Node

mixiaomi_router_ax3200_firmwareRange<2023.2

AND

mixiaomi_router_ax3200Match-

CPENameOperatorVersion
mi:xiaomi_router_ax3200_firmwaremi xiaomi router ax3200 firmwarelt2023.2

CPE	Name	Operator	Version
mi:xiaomi_router_ax3200_firmware	mi xiaomi router ax3200 firmware	lt	2023.2

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Xiaomi Router",
    "vendor": "Xiaomi",
    "versions": [
      {
        "lessThan": "fw version before 2023.2",
        "status": "affected",
        "version": "0",
        "versionType": "2023.2"
      }
    ]
  }
]

References

trust.mi.com/misrc/bulletins/advisory?cveId=539

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.4%

JSON

Related for CVE-2023-26318

prion1 nvd1 cvelist1