CVE-2024-45348

8.8 highEPSS 0.8%

High (8.8) in mi ax9000 firmware. EPSS 0.8% chance of exploitation in the next 30 days.

Xiaomi Router AX9000 has a post-authorization command injection vulnerability. This vulnerability is caused by the lack of validation of user input, and an attacker can exploit this vulnerability to execute arbitrary code.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE: CWE-77
Published: 2024-09-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mi:ax9000_firmware

References

https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=547

Check your stack JSON