Vulnerability Details CVE-2018-19031
A command injection vulnerability exists when the authorized user passes crafted parameter to background process in the router. This affects 360 router series products (360 Safe Router P0,P1,P2,P3,P4), the affected version is V2.0.61.58897.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.031
EPSS Ranking 86.6%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.5
References
Products affected by CVE-2018-19031
-
cpe:2.3:h:360:safe_router_p0:-
-
cpe:2.3:h:360:safe_router_p1:-
-
cpe:2.3:h:360:safe_router_p2:-
-
cpe:2.3:h:360:safe_router_p3:-
-
cpe:2.3:h:360:safe_router_p4:-
-
cpe:2.3:o:360:safe_router_p0_firmware:2.0.61.58897
-
cpe:2.3:o:360:safe_router_p1_firmware:2.0.61.58897
-
cpe:2.3:o:360:safe_router_p2_firmware:2.0.61.58897
-
cpe:2.3:o:360:safe_router_p3_firmware:2.0.61.58897
-
cpe:2.3:o:360:safe_router_p4_firmware:2.0.61.58897