PT-2020-4298
CVE-2020-14100
·
تاريخ النشر
2020-09-11
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
10
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Xiaomi R3600 ROM version prior to 1.0.66
Description:
The issue is related to insufficient input validation in the set WAN6 interface of the Xiaomi R3600 router's firmware, allowing filters to be bypassed. This can lead to remote code execution, enabling an attacker to gain root access to the router. An attacker can exploit this issue by sending specially crafted network packets to the targeted system.
Recommendations:
For versions prior to 1.0.66, update to version 1.0.66 or later to resolve the issue. As a temporary workaround, consider restricting access to the set WAN6 interface until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾