CVE-2023-26315

NVD Published Date: August 26, 2024 at 12:15 PM

NVD Last Modified: September 06, 2024 at 10:25 PM

Download Patch

Vulnerability ID

CVE-2023-26315

Severity

HIGH

Severity Score

8.8

Summary

The Xiaomi router AX9000 has a post-authentication command injection vulnerability. This vulnerability is caused by the lack of input filtering, allowing an attacker to exploit it to obtain root access to the device.

References

https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=546

Mitigation and Patches

Exploits

Metasploit Payload

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE ID

CWE-77

Recent Publish

CVE-2024-8162

CVE-2024-44558

CVE-2024-8163

CVE-2024-44556

Security Update For Exchange Server 2019 CU14 (KB5036401)

Security Update For Exchange Server 2019 CU13 (KB5036402)

See SecOps Solution
in action

Schedule Demo

Agentless security for your infrastructure and applications - to build faster, more securely and in a fraction of the operational cost of other solutions

CVE-2023-26315

Recent Publish

See SecOps Solution
in action

Products

Compare

Company

Resources

Try It

CVE-2023-26315

Recent Publish

See SecOps Solutionin action

Products

Compare

Company

Resources

Try It

See SecOps Solution
in action