CVE-2024-37663

Redmi router RB03 v1.0.57 is vulnerable to forged ICMP redirect message attacks. An attacker in the same WLAN as the victim can hijack the traffic between the victim and any remote server by sending out forged ICMP redirect messages...

CVE-2024-37664

Redmi router RB03 v1.0.57 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mappings in the router...

Xiaomi Redmi RB03 Security Vulnerability

Xiaomi Redmi RB03 is a wireless router from Chinese company Xiaomi Xiaomi. A security vulnerability exists in Xiaomi Redmi RB03 v1.0.57, which stems from vulnerability to TCP DoS or hijacking attacks, where an attacker can evict the NAT mapping in the router by sending a forged TCP RST message to...

Xiaomi Redmi RB03 Security Vulnerability

Xiaomi Redmi RB03 is a wireless router from Chinese company Xiaomi Xiaomi. A security vulnerability exists in Xiaomi Redmi RB03 version v1.0.57, which stems from vulnerability to a forged ICMP redirect message attack, where an attacker can hijack traffic between a victim and any remote server by...

CVE-2024-37663

CVE-2024-37663 affects Redmi router RB03 v1.0.57. The flaw allows forged ICMP redirect messages, enabling an attacker on the same WLAN to hijack traffic between a victim and any remote server. Root cause: manipulation of ICMP redirect handling that redirects traffic through attacker-controlled pa...

CVE-2024-37664

Redmi router RB03 v1.0.57 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mappings in the router...

PT-2024-27703 · Xiaomi · Redmi Router Rb03

Name of the Vulnerable Software and Affected Versions: Redmi router RB03 version 1.0.57 Description: The issue allows an attacker in the same WLAN as the victim to disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mapping...

PT-2024-27702 · Xiaomi · Redmi Router Rb03

Name of the Vulnerable Software and Affected Versions: Redmi router RB03 version 1.0.57 Description: The issue allows an attacker in the same WLAN as the victim to hijack traffic between the victim and any remote server by sending forged ICMP redirect messages. This can be exploited by an attacke...

CVE-2024-37664

Redmi router RB03 v1.0.57 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mappings in the router...

CVE-2024-37663

Redmi router RB03 v1.0.57 is vulnerable to forged ICMP redirect message attacks. An attacker in the same WLAN as the victim can hijack the traffic between the victim and any remote server by sending out forged ICMP redirect messages...

CVE-2024-37664

The CVE-2024-37664 entry affects Redmi router RB03 v1.0.57. The vulnerability allows TCP DoS or hijacking by a local attacker on the same WLAN to send forged TCP RST messages, evicting NAT mappings and disrupting or hijacking traffic between a victim client and any remote server. The issue is roo...

CVE-2024-37663

Redmi router RB03 v1.0.57 is vulnerable to forged ICMP redirect message attacks. An attacker in the same WLAN as the victim can hijack the traffic between the victim and any remote server by sending out forged ICMP redirect messages...

The vulnerability of the MiUI mobile operating system in devices like Redmi Note 11 and Redmi Note 9T, related to writing beyond the buffer in memory, allows a hacker to trigger a service failure.

The vulnerability of the mobile operating system MIUI is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

多款小米手机缓冲区错误漏洞

The Xiaomi Redmi K40 and the Xiaomi Redmi Note10 Pro are both smartphones from Chinese company Xiaomi. The Xiaomi phones have a security vulnerability that stems from a heap overflow that can be exploited by an attacker to cause a remote denial of service. The following versions are affected: Red...

Redmi Note 11 和 Redmi Note 9T 缓冲区错误漏洞

Xiaomi Redmi Note 11 and Redmi Note 9T are both smartphones from Chinese company Xiaomi. The Redmi Note 11 and Redmi Note 9T suffer from a security vulnerability that stems from a stack overflow. An attacker can exploit the vulnerability to conduct a denial of service attack...

nodejs-ua-parser-js: Regular expression denial of service via the regex

A flaw was found in nodejs-ua-parser-js. The software is vulnerable to Regular Expression Denial of Service ReDoS via the regex for Redmi Phones and Mi Pad Tablets UA...

Xiaomi 10.2.4.g Information Disclosure

Exploit Title: Xiaomi browser 10.2.4.g - Browser Search History Disclosure Date: 27-Dec-2018 Exploit Author: Vishwaraj101 Vendor Homepage: https://www.mi.com/us Software Link: https://www.apkmirror.com/apk/xiaomi-inc/mi-browse/mi-browse-10-2-4-release/ Version: 10.2.4.g Tested on: Tested in Andro...

Xiaomi browser 10.2.4.g - Browser Search History Disclosure Vulnerability

Exploit Title: Xiaomi browser 10.2.4.g - Browser Search History Disclosure Exploit Author: Vishwaraj101 Vendor Homepage: https://www.mi.com/us Software Link: https://www.apkmirror.com/apk/xiaomi-inc/mi-browse/mi-browse-10-2-4-release/ Version: 10.2.4.g Tested on: Tested in Android Version: 8.1.0...

nodejs-ua-parser-js: Regular expression denial of service via the regex

A flaw was found in nodejs-ua-parser-js. The software is vulnerable to Regular Expression Denial of Service ReDoS via the regex for Redmi Phones and Mi Pad Tablets UA...

Regular Expression Denial of Service in ua-parser-js

The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service ReDoS via the regex for Redmi Phones and Mi Pad Tablets UA...