Skip to content
CVE PROGRAM SOURCE RECORD6.4 Medium

CVE-2024-45348

Xiaomi Router AX9000 has a post-authorization command injection vulnerability

Description

Xiaomi Router AX9000 has a post-authorization command injection vulnerability. This vulnerability is caused by the lack of validation of user input, and an attacker can exploit this vulnerability to execute arbitrary code.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Xiaomi Xiaomi Router AX9000

Default version status: affected

  • 1.0.173affected

References