CVE-2023-26317

Summary

CVE-2023-26317 is a newly discovered vulnerability affecting Xiaomi routers. The issue stems from insufficient filtering of external interface responses, leading to command injection. Malicious actors can exploit this vulnerability by taking control of the ISP or an upper-layer router, ultimately gaining privileges on the Xiaomi router. Successfully exploited, this flaw permits attackers to execute remote code and fully compromise the device.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.