Lucene search
XiaomiCVELIST:CVE-2023-26320HistoryOct 11, 2023 - 6:49 a.m.
CVE-2023-26320 Xiaomi Router external request interface vulnerability leads to stack overflow
2023-10-1106:49:50
CWE-77
Xiaomi
www.cve.org
2
xiaomi
router
stack overflow
vulnerability
command injection
CVSS3
7.5
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
8.3
Confidence
High
EPSS
0.001
Percentile
31.9%
Improper Neutralization of Special Elements used in a Command (‘Command Injection’) vulnerability in Xiaomi Xiaomi Router allows Command Injection.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Xiaomi Router",
"vendor": "Xiaomi",
"versions": [
{
"lessThan": "fw version before 2023.2",
"status": "affected",
"version": "0",
"versionType": "2023.2"
}
]
}
]Related
cve
cve
CVE-2023-26320
2023-10-11 07:15:10
prion
prion
Command injection
2023-10-11 07:15:00
nvd
nvd
CVE-2023-26320
2023-10-11 07:15:10
vulnrichment
vulnrichment
CVSS3
7.5
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
8.3
Confidence
High
EPSS
0.001
Percentile
31.9%
Related for CVELIST:CVE-2023-26320