CVE-2019-3404

By adding some special fields to the uri ofrouter app function, the user could abuse background app cgi functions withoutauthentication. This affects 360 router P0 and F5C.

Score

CVSS 3.1 7.5 High

Status

Modified - security@360.cn

Published

2020-03-04

Last modified

2024-08-04

Weaknesses

CWE-287

Affected products

• F5c Router Firmware (360)
• P0 Router Firmware (360)
• 360 Router F5c (360 Security Technology Inc.)

References

• https://security.360.cn/News/news/id/218.html