Xiaomi Router administration interface vulnerability leads command injection and stack overflow

CVE-2023-26319

Summary

A command injection vulnerability has been identified in Xiaomi Router, allowing attackers to execute arbitrary commands on the device. This weakness stems from improper neutralization of special elements within command inputs, which could be exploited to manipulate device behavior and gain unauthorized access. It is crucial for users to apply relevant security measures and updates to safeguard their networks against potential exploitation.

References