CVE-2018-19031: Command Injection
First published: Mon Nov 04 2019(Updated: )
A command injection vulnerability exists when the authorized user passes crafted parameter to background process in the router. This affects 360 router series products (360 Safe Router P0,P1,P2,P3,P4), the affected version is V2.0.61.58897.
Credit: security@360.cn
| Affected Software | Affected Version | How to fix |
|---|---|---|
| 360 Safe Router P0 | =2.0.61.58897 | |
| 360 Safe Router P0 Firmware | ||
| 360 Safe Router P1 | =2.0.61.58897 | |
| 360 Safe Router P1 Firmware | ||
| 360 Safe Router P2 | =2.0.61.58897 | |
| 360 Safe Router P2 Firmware | ||
| 360 Safe Router P3 Firmware | =2.0.61.58897 | |
| 360 Safe Router P3 Firmware | ||
| 360 Safe Router P4 | =2.0.61.58897 | |
| 360 Safe Router P4 Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-19031?
CVE-2018-19031 is classified as a high severity command injection vulnerability.
How do I fix CVE-2018-19031?
To fix CVE-2018-19031, update the affected 360 Safe Router firmware to a version above 2.0.61.58897.
Which router models are affected by CVE-2018-19031?
CVE-2018-19031 affects the 360 Safe Router P0, P1, P2, P3, and P4 models with firmware version 2.0.61.58897.
Who is affected by CVE-2018-19031?
Authorized users of the affected 360 Safe Router models may be impacted by CVE-2018-19031.
What is the nature of the vulnerability in CVE-2018-19031?
CVE-2018-19031 is a command injection vulnerability that occurs when crafted parameters are passed to a background process in the router.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/author
- agent/severity
- agent/references
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/description
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/360
- canonical/360 safe router p0
- version/360 safe router p0/2.0.61.58897
- canonical/360 safe router p0 firmware
- canonical/360 safe router p1
- version/360 safe router p1/2.0.61.58897
- canonical/360 safe router p1 firmware
- canonical/360 safe router p2
- version/360 safe router p2/2.0.61.58897
- canonical/360 safe router p2 firmware
- canonical/360 safe router p3 firmware
- version/360 safe router p3 firmware/2.0.61.58897
- canonical/360 safe router p4
- version/360 safe router p4/2.0.61.58897
- canonical/360 safe router p4 firmware