CVE-2018-13023

A system command injection vulnerability exists in the wifi_access endpoint of the Xiaomi Mi Router 3 (version 2.22.15 ). The root cause is the improper neutralization of special elements used in an OS command, specifically via the "timeout" URL parameter. This flaw allows an attacker to execute ...

CVE-2018-13023

System command injection vulnerability in wifiaccess in Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute system commands via the "timeout" URL parameter...