Xiaomi AX9000 Router Vulnerable to Post-Authentication Command Injection

CVE-2023-26315

Summary

The Xiaomi Router AX9000 is affected by a post-authentication command injection vulnerability. This issue arises from a lack of proper input filtering, enabling attackers to execute arbitrary commands on the device after authentication. By exploiting this vulnerability, an attacker can gain root access, compromising the integrity and confidentiality of the router and potentially the network it connects to. It is crucial for users of the Xiaomi Router AX9000 to apply recommended security updates and employ best practices for device configuration to mitigate the risk associated with this vulnerability.

References