955 matches found
Xiaomi Mi Jia ink-jet printer injection vulnerability
Xiaomi Mi Jia ink-jet printer is a multifunctional printer from China's Xiaomi Technology Xiaomi. A security vulnerability exists in versions prior to Xiaomi Mi Jia ink-jet printer 3.4.60138. The vulnerability can be exploited by an attacker to inject parameters into the ippserver via the web...
CVE-2020-11961
Xiaomi router R3600 ROM before 1.0.50 is affected by a sensitive information leakage caused by an insecure interface getconfigresult without authentication...
CVE-2020-11961
Xiaomi router R3600 ROM before 1.0.50 is affected by a sensitive information leakage caused by an insecure interface getconfigresult without authentication...
CVE-2020-10561
An issue was discovered on Xiaomi Mi Jia ink-jet printer 3.4.60138. Injecting parameters to ippserver through the web management background, resulting in command execution vulnerabilities...
CVE-2020-11960
Xiaomi router R3600 ROM before 1.0.50 is affected by a vulnerability when checking backup file in cupload interface let attacker able to extract malicious file under any location in /tmp, lead to possible RCE and DoS...
CVE-2020-11960
Xiaomi router R3600 ROM before 1.0.50 is affected by a vulnerability when checking backup file in cupload interface let attacker able to extract malicious file under any location in /tmp, lead to possible RCE and DoS...
CVE-2020-11959
An unsafe configuration of nginx lead to information leak in Xiaomi router R3600 ROM before 1.0.50...
CVE-2020-10561
An issue was discovered on Xiaomi Mi Jia ink-jet printer 3.4.60138. Injecting parameters to ippserver through the web management background, resulting in command execution vulnerabilities...
CVE-2020-11959
An unsafe configuration of nginx lead to information leak in Xiaomi router R3600 ROM before 1.0.50...
Command injection
An issue was discovered on Xiaomi Mi Jia ink-jet printer 3.4.60138. Injecting parameters to ippserver through the web management background, resulting in command execution vulnerabilities...
Authentication flaw
Xiaomi router R3600 ROM before 1.0.50 is affected by a sensitive information leakage caused by an insecure interface getconfigresult without authentication...
Design/Logic Flaw
Xiaomi router R3600 ROM before 1.0.50 is affected by a vulnerability when checking backup file in cupload interface let attacker able to extract malicious file under any location in /tmp, lead to possible RCE and DoS...
Design/Logic Flaw
An unsafe configuration of nginx lead to information leak in Xiaomi router R3600 ROM before 1.0.50...
CVE-2020-10561
CVE-2020-10561 affects Xiaomi Mi Jia ink-jet printer prior to version 3.4.6_0138. The vulnerability stems from injecting parameters into the ippserver via the web administration backend, enabling command execution. Affected product: Xiaomi Mi Jia ink‑jet printer; vulnerability class: command inje...
CVE-2020-10561
An issue was discovered on Xiaomi Mi Jia ink-jet printer 3.4.60138. Injecting parameters to ippserver through the web management background, resulting in command execution vulnerabilities...
CVE-2020-11961
Xiaomi router R3600 ROM before 1.0.50 is affected by a sensitive information leakage caused by an insecure interface getconfigresult without authentication...
CVE-2020-11961
The CVE-2020-11961 entry concerns Xiaomi router R3600 ROMs older than 1.0.50, where an insecure get_config_result interface allows sensitive information leakage without authentication. Affected component is the router firmware; impact is confidential data exposure with no integrity or availabilit...
CVE-2020-11960
Xiaomi router R3600 ROM before 1.0.50 is affected by a vulnerability when checking backup file in cupload interface let attacker able to extract malicious file under any location in /tmp, lead to possible RCE and DoS...
CVE-2020-11960
The CVE-2020-11960 entry concerns the Xiaomi router R3600 ROM prior to 1.0.50. A flaw in the c_upload interface’s backup file handling lets an attacker extract a malicious file to arbitrary /tmp locations, enabling potential remote code execution and denial of service. The NVD description documen...