CVEvulnerability

CVE-2018-19031

8.8 HIGH Published 2019-11-04 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-11-04
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
CWE-77

Description

A command injection vulnerability exists when the authorized user passes crafted parameter to background process in the router. This affects 360 router series products (360 Safe Router P0,P1,P2,P3,P4), the affected version is V2.0.61.58897.

Affected configurations

• 360 safe router p0 firmware 2.0.61.58897 • 360 safe router p1 firmware 2.0.61.58897 • 360 safe router p2 firmware 2.0.61.58897 • 360 safe router p3 firmware 2.0.61.58897 • 360 safe router p4 firmware 2.0.61.58897

Related

Weakness · CWE (1)

  • CWE-77 Improper Neutralization of Special Elements used in a Command weakness

References