CVE-2024-45348

Xiaomi Router AX9000 has a post-authorization command injection vulnerability. This vulnerability is caused by the lack of validation of user input, and an attacker can exploit this vulnerability to execute arbitrary code.

Score

CVSS 3.1 8.8 High

Status

Analyzed - security@xiaomi.com

Published

2024-09-23

Last modified

2025-03-27

Weaknesses

CWE-77

Affected products

• Ax9000 Firmware (Mi)
• Xiaomi Router Ax9000 (Xiaomi)

References

• https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=547