PT-2018-13414
CVE-2018-16130
·
تاريخ النشر
2018-11-27
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 2.0
9.0
عاليةالمقاييسAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Xiaomi Mi Router 3 version 2.22.15
Description
The issue allows attackers to execute arbitrary system commands via the
payload variable in the request mitv function. This can be achieved by manipulating the "payload" URL parameter.Recommendations
For Xiaomi Mi Router 3 version 2.22.15, consider restricting access to the request mitv function until a patch is available. As a temporary workaround, avoid using the
payload variable in the affected URL parameter to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾