Vulnerabilities

TI-2023-11473 CVE-2023-26320 · GHSA-wjgc-gw8v-m4vg

Xiaomi Router external request interface vulnerability leads to stack overflow

MEDIUM 40

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Router allows Command Injection.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01139 Published 2023-10-11 Fixed in fw version before 2023.2 CWE-120

TI-2023-11472 CVE-2023-26319 · GHSA-4j9w-xhrc-q5vq

LOW 36

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Router allows Command Injection.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00975 Published 2023-10-11 Fixed in fw version before 2023.2 CWE-120

TI-2023-11471 CVE-2023-26318 · GHSA-qm2m-hfw4-jq7f

LOW 34

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Xiaomi Xiaomi Router allows Overflow Buffers.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00586 Published 2023-10-11 Fixed in fw version before 2023.2 CWE-120