Lucene search

MitreCVE-2019-18370

HistoryOct 23, 2019 - 9:15 p.m.

CVE-2019-18370

2019-10-2321:15:10

CWE-78

mitre

web.nvd.nist.gov

xiaomi

mi wifi

r3g

command injection

security vulnerability

backup file

upload

nvd

cve-2019-18370

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.008

Percentile

81.7%

JSON

An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. The backup file is in tar.gz format. After uploading, the application uses the tar zxf command to decompress, so one can control the contents of the files in the decompressed directory. In addition, the application’s sh script for testing upload and download speeds reads a URL list from /tmp/speedtest_urls.xml, and there is a command injection vulnerability, as demonstrated by api/xqnetdetect/netspeed.

Affected configurations

Nvd

Node

mimillet_router_3g_firmwareRange<2.28.23

AND

mimillet_router_3gMatch-

VendorProductVersionCPE
mimillet_router_3g_firmware*cpe:2.3:o:mi:millet_router_3g_firmware:*:*:*:*:*:*:*:*
mimillet_router_3g-cpe:2.3:h:mi:millet_router_3g:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mi	millet_router_3g_firmware	*	cpe:2.3:o:mi:millet_router_3g_firmware::::::::
mi	millet_router_3g	-	cpe:2.3:h:mi:millet_router_3g:-:::::::*

References

github.com/UltramanGaia/Xiaomi_Mi_WiFi_R3G_Vulnerability_POC/blob/master/remote_command_execution_vulnerability.py

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.008

Percentile

81.7%

JSON

Related for CVE-2019-18370