CVE-2018-14060 – OS command injection in the AP mode settings feature in /cgi-bin/luci /api/misystem/set_ro …

0

Vuln ID: CVE-2018-14060

Published:  2018-07-15  03:29:00Z

Description: OS command injection in the AP mode settings feature in /cgi-bin/luci /api/misystem/set_router_wifiap on Xiaomi R3D before 2.26.4 devices allows an attacker to execute any command via crafted JSON data.

Source: NVD.NIST.GOV