Mi Millet Router 3g Firmware vulnerabilities

2 CVEs affecting Mi Millet Router 3g Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-18371, published 2019-10-23.

More from Mi.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-18371, published 2019-10-23. High severity, CVSS 7.5. EPSS: 55.9% chance of exploitation in the next 30 days. An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. There is a directory traversal vulnerability to read arbitrary files via a misconfigured NGINX alias, as demonstrated by…
• CVE-2019-18370, published 2019-10-23. Critical severity, CVSS 9.8. EPSS: 40.3% chance of exploitation in the next 30 days. An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. The backup file is in tar.gz format. After uploading, the application uses the tar zxf command to decompress, so one can…