PT-2024-31577 · Xiaomi · Xiaomi Router Ax9000

Name of the Vulnerable Software and Affected Versions: Xiaomi Router AX9000 version 1.0.173 Description: The issue is caused by the lack of validation of user input, allowing an attacker to exploit it and execute arbitrary code. This is a post-authorization command injection vulnerability, enabli...

Xiaomi AX9000 安全漏洞

The Xiaomi AX9000 is a wireless router from the Chinese company Xiaomi Xiaomi. A security vulnerability exists in Xiaomi AX9000, which stems from a lack of validation of user input. An attacker can exploit the vulnerability to execute arbitrary code...

CVE-2023-26323

A code execution vulnerability exists in the Xiaomi App market product. The vulnerability is caused by unsafe configuration and can be exploited by attackers to execute arbitrary code...

CVE-2023-26321

A path traversal vulnerability exists in the Xiaomi File Manager application productinternational version. The vulnerability is caused by unfiltered special characters and can be exploited by attackers to overwrite and execute code in the file...

CVE-2023-26323

A code execution vulnerability exists in the Xiaomi App market product. The vulnerability is caused by unsafe configuration and can be exploited by attackers to execute arbitrary code...

CVE-2023-26324

A code execution vulnerability exists in the XiaomiGetApps application product. This vulnerability is caused by the verification logic being bypassed, and an attacker can exploit this vulnerability to execute malicious code...

CVE-2023-26321

A path traversal vulnerability exists in the Xiaomi File Manager application productinternational version. The vulnerability is caused by unfiltered special characters and can be exploited by attackers to overwrite and execute code in the file...

CVE-2023-26322

A code execution vulnerability exists in the XiaomiGetApps application product. This vulnerability is caused by the verification logic being bypassed, and an attacker can exploit this vulnerability to execute malicious code...

CVE-2023-26323

A code execution vulnerability exists in the Xiaomi App market product. The vulnerability is caused by unsafe configuration and can be exploited by attackers to execute arbitrary code...

CVE-2023-26323 Xiaomi App Market has a code execution vulnerability

A code execution vulnerability exists in the Xiaomi App market product. The vulnerability is caused by unsafe configuration and can be exploited by attackers to execute arbitrary code...

CVE-2023-26323

CVE-2023-26323 affects Xiaomi App Market. Connected sources confirm a code execution vulnerability caused by unsafe configuration in the product, enabling arbitrary code execution. The NVD entry lists a CVSSv3.1 base score of 9.8 (CRITICAL) with network access, no user interaction, and high impac...

CVE-2023-26323 Xiaomi App Market has a code execution vulnerability

A code execution vulnerability exists in the Xiaomi App market product. The vulnerability is caused by unsafe configuration and can be exploited by attackers to execute arbitrary code...

CVE-2023-26321 The international version of Xiaomi File Manager has a path traversal vulnerability

A path traversal vulnerability exists in the Xiaomi File Manager application productinternational version. The vulnerability is caused by unfiltered special characters and can be exploited by attackers to overwrite and execute code in the file...

CVE-2023-26321

CVE-2023-26321 affects the international version of Xiaomi File Manager and is a path traversal vulnerability caused by unfiltered special characters, enabling overwriting and code execution in the file. Public data assigns a high/critical impact profile (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:...

CVE-2023-26321 The international version of Xiaomi File Manager has a path traversal vulnerability

A path traversal vulnerability exists in the Xiaomi File Manager application productinternational version. The vulnerability is caused by unfiltered special characters and can be exploited by attackers to overwrite and execute code in the file...

CVE-2024-45346

The Xiaomi Security Center expresses heartfelt thanks to Ken Gannon and Ilyes Beghdadi of NCC Group working with Trend Micro Zero Day Initiative! At the same time, we also welcome more outstanding and professional security experts and security teams to join the Mi Security Center MiSRC to jointly...

CVE-2024-45346

CVE-2024-45346 affects Xiaomi GetApps. Connected sources indicate a code execution vulnerability in GetApps, linked to bypassing authentication logic. The CVSS-style metrics in the initial document show high impact (C, I, A = High) with network attack vector and user interaction required. Public ...

CVE-2024-45346 GetApps application has code execution vulnerability

The Xiaomi Security Center expresses heartfelt thanks to Ken Gannon and Ilyes Beghdadi of NCC Group working with Trend Micro Zero Day Initiative! At the same time, we also welcome more outstanding and professional security experts and security teams to join the Mi Security Center MiSRC to jointly...

CVE-2024-45346 GetApps application has code execution vulnerability

The Xiaomi Security Center expresses heartfelt thanks to Ken Gannon and Ilyes Beghdadi of NCC Group working with Trend Micro Zero Day Initiative! At the same time, we also welcome more outstanding and professional security experts and security teams to join the Mi Security Center MiSRC to jointly...

Xiaomi GetApps 安全漏洞

Xiaomi GetApps is a global app store by Chinese company Xiaomi. It is used by developers to publish and distribute their apps to over 200 million users in 59 regions. A security vulnerability exists in Xiaomi GetApps that stems from authentication logic that can be bypassed...