CVE-2018-19031: Command Injection

Published Nov 4, 2019

Updated

A command injection vulnerability exists when the authorized user passes crafted parameter to background process in the router. This affects 360 router series products (360 Safe Router P0,P1,P2,P3,P4), the affected version is V2.0.61.58897.

Affected Software

10 affected components

360 Safe Router P0 Firmware=2.0.61.58897

360 Safe Router P0

360 Safe Router P1 Firmware=2.0.61.58897

360 Safe Router P1

360 Safe Router P2 Firmware=2.0.61.58897

360 Safe Router P2

360 Safe Router P3 Firmware=2.0.61.58897

360 Safe Router P3

360 Safe Router P4 Firmware=2.0.61.58897

360 Safe Router P4

Event History

Nov 4, 2019

CVE Published

via MITRE·02:42 PM

Data Sourced

via MITRE·02:42 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-19031?

CVE-2018-19031 is classified as a high severity command injection vulnerability.

How do I fix CVE-2018-19031?

To fix CVE-2018-19031, update the affected 360 Safe Router firmware to a version above 2.0.61.58897.

Which router models are affected by CVE-2018-19031?

CVE-2018-19031 affects the 360 Safe Router P0, P1, P2, P3, and P4 models with firmware version 2.0.61.58897.

Who is affected by CVE-2018-19031?

Authorized users of the affected 360 Safe Router models may be impacted by CVE-2018-19031.

What is the nature of the vulnerability in CVE-2018-19031?

CVE-2018-19031 is a command injection vulnerability that occurs when crafted parameters are passed to a background process in the router.