Vulnerability Details CVE-2018-19031
A command injection vulnerability exists when the authorized user passes crafted parameter to background process in the router. This affects 360 router series products (360 Safe Router P0,P1,P2,P3,P4), the affected version is V2.0.61.58897.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.037
EPSS Ranking 87.4%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.5
References
Products affected by CVE-2018-19031
-
cpe:2.3:h:360:safe_router_p0:-
-
cpe:2.3:h:360:safe_router_p1:-
-
cpe:2.3:h:360:safe_router_p2:-
-
cpe:2.3:h:360:safe_router_p3:-
-
cpe:2.3:h:360:safe_router_p4:-
-
cpe:2.3:o:360:safe_router_p0_firmware:2.0.61.58897
-
cpe:2.3:o:360:safe_router_p1_firmware:2.0.61.58897
-
cpe:2.3:o:360:safe_router_p2_firmware:2.0.61.58897
-
cpe:2.3:o:360:safe_router_p3_firmware:2.0.61.58897
-
cpe:2.3:o:360:safe_router_p4_firmware:2.0.61.58897