Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-26320

Xiaomi Router external request interface vulnerability leads to stack overflow

Description

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Router allows Command Injection.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Xiaomi Xiaomi Router

Default version status: unaffected

  • 0 to < fw version before 2023.2affected

References