CVE-2023-26317

The CVE-2023-26317 entry concerns Xiaomi routers with an external interface that can be abused to perform command injection. The root cause is lax filtering of responses from the external interface, enabling an attacker to hijack ISP routing or an upper-layer route to gain unauthorized access and...