medium6.4
CVE-2024-45348
Xiaomi Router AX9000 has a post-authorization command injection vulnerability.
Impact
Xiaomi Router AX9000 has a post-authorization command injection vulnerability. This vulnerability is caused by the lack of validation of user input, and an attacker can exploit this vulnerability to execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mi | Ax9000 Firmware | before 1.0.174 |