Lucene search
XiaomiCVELIST:CVE-2023-26319HistoryOct 11, 2023 - 6:45 a.m.
CVE-2023-26319 Xiaomi Router administration interface vulnerability leads command injection and stack overflow
2023-10-1106:45:07
CWE-77
Xiaomi
www.cve.org
3
cve-2023-26319
xiaomi router
administration interface
command injection
stack overflow
special elements
vulnerability
CVSS3
6.7
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
23.6%
Improper Neutralization of Special Elements used in a Command (‘Command Injection’) vulnerability in Xiaomi Xiaomi Router allows Command Injection.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Xiaomi Router",
"vendor": "Xiaomi",
"versions": [
{
"lessThan": "fw version before 2023.2",
"status": "affected",
"version": "0",
"versionType": "2023.2"
}
]
}
]Related
prion
prion
Command injection
2023-10-11 07:15:00
cve
cve
CVE-2023-26319
2023-10-11 07:15:10
vulnrichment
vulnrichment
nvd
nvd
CVE-2023-26319
2023-10-11 07:15:10
CVSS3
6.7
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
23.6%
Related for CVELIST:CVE-2023-26319