Vulnerability Details CVE-2023-26315
The Xiaomi router AX9000 has a post-authentication command injection vulnerability. This vulnerability is caused by the lack of input filtering, allowing an attacker to exploit it to obtain root access to the device.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.475
EPSS Ranking 97.5%
CVSS Severity
CVSS v3 Score 6.5
Products affected by CVE-2023-26315
-
cpe:2.3:h:mi:ax9000:-
-
cpe:2.3:o:mi:ax9000_firmware:*