Command injection

2022-03-1017:41:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.8%

JSON

A command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused by a lack of inspection for incoming data detection. Attackers can exploit this vulnerability to execute code.

CPENameOperatorVersion
ax3600_firmwarelt1.0.67

CPE	Name	Operator	Version
	ax3600_firmware	lt	1.0.67

References

trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=37