CVE-2024-37663: Medium severity Redmi RB03 vulnerability
Published Jun 17, 2024
·Updated
Redmi router RB03 v1.0.57 is vulnerable to forged ICMP redirect message attacks. An attacker in the same WLAN as the victim can hijack the traffic between the victim and any remote server by sending out forged ICMP redirect messages.
Affected Software
3 affected components
Redmi RB03
All of the following
Mi Redmi Ax6s Firmware=1.0.57
Mi Redmi Ax6s
Event History
Jun 17, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-37663?
CVE-2024-37663 is considered a high-severity vulnerability due to its potential for traffic hijacking.
2
What does CVE-2024-37663 affect?
CVE-2024-37663 affects the Redmi router RB03 version 1.0.57.
3
How can an attacker exploit CVE-2024-37663?
An attacker can exploit CVE-2024-37663 by sending forged ICMP redirect messages within the same WLAN.
4
How do I fix CVE-2024-37663?
To fix CVE-2024-37663, users should update their Redmi router RB03 to the latest firmware version provided by the manufacturer.
5
What are the risks associated with CVE-2024-37663?
The risks associated with CVE-2024-37663 include unauthorized traffic interception and potential data theft or manipulation.