There is command injection in the addMeshNode interface of xqnetwork.lua, which leads to command execution under administrator authority on Xiaomi router AX3600 with rom versionrom< 1.1.12
oryginał ENCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HMi Ax3600
OSMi< 1.1.12
Powiązane podatności
A command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused by a lack of...
There is a buffer overflow in librsa.so called by getwifipwdurl interface, resulting in code execution on Xiao...
A command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused by a lack of...
AX3600 router sensitive information leaked.There is an unauthorized interface through luci to obtain sensitive...
There is command injection in the meshd program in the routing system, resulting in command execution under ad...