Xiaomi Router AX9000 Vulnerable to Post-Authorization Command Injection

CVE-2024-45348

What is CVE-2024-45348?

The Xiaomi Router AX9000 is affected by a post-authorization command injection vulnerability. This flaw stems from the inadequate validation of user input, which allows attackers to exploit the vulnerability and execute arbitrary commands on the device. Such an exploit could lead to unauthorized actions, potentially compromising the integrity and security of the network. Users of the affected router are advised to review security measures and apply necessary updates to mitigate the risk associated with this vulnerability.

References