Design/Logic Flaw

2020-06-2417:15:00

PRIOn knowledge base

www.prio-n.com

9.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.8%

JSON

Xiaomi router R3600 ROM before 1.0.50 is affected by a vulnerability when checking backup file in c_upload interface let attacker able to extract malicious file under any location in /tmp, lead to possible RCE and DoS

CPENameOperatorVersion
xiaomi_r3600_firmwarelt1.0.20

CPE	Name	Operator	Version
	xiaomi_r3600_firmware	lt	1.0.20

References

privacy.mi.com/trust