CVE-2019-18371

An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. There is a directory traversal vulnerability to read arbitrary files via a misconfigured NGINX alias, as demonstrated by api-third-party/download/extdisks../etc/config/account. With this vulnerability, the attacker can bypass authentication.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

55.87% chance of exploitation in the next 30 days, 99th percentile

Nuclei

high · CWE-22

Published

2019-10-23

Updated

2024-08-05

Proof-of-concept exploits (2)

• UltramanGaia/Xiaomi_Mi_WiFi_R3G_Vulnerability_POC185★ · 2020-01-12
• UltramanGaia/POC-EXP0★ · 2020-04-09

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-18371.yaml

Exploit collections (1)

• zan8in/afrog/blob/main/pocs/afrog-pocs/CVE/2019/CVE-2019-18371.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2018-7600
• CVE-2019-18370
• CVE-2019-18393
• CVE-2019-18359
• CVE-2019-18394
• CVE-2019-18350