Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-45348

Xiaomi Router AX9000 has a post-authorization command injection vulnerability. This vulnerability is caused by the lack of validation of user input, and an attacker can exploit this vulnerability to execute arbitrary code.

Published

2024-09-23T09:15:02.960

Last Modified

2024-11-25T17:14:11.713

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.4 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-77
  • Type: Primary
    CWE-77
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System mi ax9000_firmware < 1.0.174 Yes
Hardware mi ax9000 - No
References