PT-2024-27702
CVE-2024-37663
·
Published
2024-06-17
·
Updated
2024-11-22
Description by
CVSS 3.1
4.1
MediumMetricsAV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Redmi router RB03 version 1.0.57
Description
The issue allows an attacker in the same WLAN as the victim to hijack traffic between the victim and any remote server by sending forged ICMP redirect messages. This can be exploited by an attacker in the same wireless network.
Recommendations
For Redmi router RB03 version 1.0.57, update to a newer version that contains a fix for this issue. As a temporary workaround, consider restricting access to the network to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾