CVE-2019-18371
HIGH EXPLOITED NUCLEIMillet Router 3G Firmware < 2.28.23 - Unauthenticated Path Traversal via NGINX Alias Misconfiguration
Title source: llmExploitation Summary
CVE-2019-18371 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 2 public exploits from researchers including UltramanGaia, AjayMT6. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains functional exploit code for CVE-2019-18371, demonstrating arbitrary file read and remote command execution vulnerabilities in Xiaomi Mi WiFi R3G routers. The PoC includes detailed technical analysis and operational exploit scripts.
Description
An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. There is a directory traversal vulnerability to read arbitrary files via a misconfigured NGINX alias, as demonstrated by api-third-party/download/extdisks../etc/config/account. With this vulnerability, the attacker can bypass authentication.
Exploits (2)
This repository contains functional exploit code for CVE-2019-18371, demonstrating arbitrary file read and remote command execution vulnerabilities in Xiaomi Mi WiFi R3G routers. The PoC includes detailed technical analysis and operational exploit scripts.
The repository contains functional exploit code for CVE-2019-18371, demonstrating an arbitrary file read vulnerability and remote command execution in Xiaomi Mi WiFi R3G routers. The PoC leverages a misconfigured NGINX alias for directory traversal and a command injection flaw in speed test functionality.
Nuclei Templates (1)
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N