Command injection

2020-06-2417:15:00

PRIOn knowledge base

www.prio-n.com

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.4%

JSON

An issue was discovered on Xiaomi Mi Jia ink-jet printer < 3.4.6_0138. Injecting parameters to ippserver through the web management background, resulting in command execution vulnerabilities.

CPENameOperatorVersion
mijia_inkjet_printer_firmwareeq< 3.4.6-138

CPE	Name	Operator	Version
	mijia_inkjet_printer_firmware	eq	< 3.4.6-138

References

privacy.mi.com/trust