Xiaomi Mi WiFi R3G Routers - Local file Inclusion
Xiaomi Mi WiFi R3G devices before 2.28.23-stable are susceptible to local file inclusion vulnerabilities via a misconfigured NGINX alias, as demonstrated by api-third-party/download/extdisks../etc/config/account. With this vulnerability, the attacker can bypass authentication.
millet_router_3g_firmwarePoC 已收录
CVSS7.5EPSS 90.6%