high7.5
CVE-2019-3404
By adding some special fields to the uri ofrouter app function, the user could abuse background app cgi functions withoutauthentication.
Impact
By adding some special fields to the uri ofrouter app function, the user could abuse background app cgi functions withoutauthentication. This affects 360 router P0 and F5C.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 360 | P0 Router Firmware | Version 3.1.1.65150 |
| 360 | F5c Router Firmware | Version 3.1.1.65150 |