Medium severity6.4NVD Advisory· Published Sep 23, 2024· Updated Jun 17, 2026

CVE-2024-45348

Description

Xiaomi Router AX9000 has a post-authorization command injection vulnerability. This vulnerability is caused by the lack of validation of user input, and an attacker can exploit this vulnerability to execute arbitrary code.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Mi/Ax9000 Firmware
cpe:2.3:o:mi:ax9000_firmware:*:*:*:*:*:*:*:*
Range: <1.0.174
Xiaomi/Router AX3600llm-fuzzy
Xiaomi/Xiaomi routerscpe-rescue
Range: 1.0.173

Patches

Vulnerability mechanics

References

trust.mi.com/zh-CN/misrc/bulletins/advisorynvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.416
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000