Security Advisory

CVE-2018-16130

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-11-27 21:00:00
Last updated 2024-08-05 10:17:37
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

System command injection in request_mitv in Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute arbitrary system commands via the "payload" URL parameter.