CVE-2018-19031

moderate-risk
Published 2019-11-04

A command injection vulnerability exists when the authorized user passes crafted parameter to background process in the router. This affects 360 router series products (360 Safe Router P0,P1,P2,P3,P4), the affected version is V2.0.61.58897.

Do I need to act?

~
3.1% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.8/10 High
NETWORK / LOW complexity

Affected Products (5)

Safe Router P0 Firmware
Safe Router P1 Firmware
Safe Router P2 Firmware
Safe Router P3 Firmware
Safe Router P4 Firmware

Affected Vendors

360

References (2)

Vendor Advisory https://security.360.cn/News/news/id/188.html
Vendor Advisory https://security.360.cn/News/news/id/188.html
48
/ 100
moderate-risk
Severity 30/34 · Critical
Exploitability 6/34 · Minimal
Exposure 12/34 · Low