{"cvss":0.0,"datePublished":"2020-10-14T00:00:00Z","dateUpdated":"2020-10-14T00:00:00Z","description":"System command injection vulnerability in wifi_access in Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute system commands via the \"timeout\" URL parameter.","dueDate":"","id":"CVE-2018-13023","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"miwifi_os","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"mi miwifi_os Improper Neutralization of Special Elements used in an OS Command","vendor":"mi"}