Xiaomi Router external request interface vulnerability leads to stack overflow

CVE-2023-26320

Summary

A command injection vulnerability exists in Xiaomi Router that allows attackers to execute arbitrary commands on the device through improper neutralization of special elements. This flaw could enable unauthorized access and manipulation of the router, posing serious risks to network security and integrity. Users of the affected router models should take immediate action to apply security patches and enhance their network defenses.

References