Xiaomi Miwifi Xiaomi 55Dd
Approved changes feed: RSS · Atom
cpe:2.3:h:mi:xiaomi_miwifi_xiaomi_55dd:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Mi (60a5be67-ae7d-588b-8dcf-30a3da19041f) |
|---|---|
| Product | Xiaomi Miwifi Xiaomi 55Dd (f0f66877-da41-561f-8abf-04cd8a6f50e5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-16307 |
not_vulnerable | 2026-06-08 05:11:04.686890 |
Details available
An "Out-of-band resource load" issue was discovered on Xiaomi MIWiFi Xiaomi_55DD Version 2.8.50 devices. It is possible to induce the application to retrieve the contents of an arbitrary external URL and return those contents in its own response. If a domain name (containing a random string) is used in the HTTP Host header, the application performs an HTTP request to the specified domain. The response from that request is then included in the application's own response.
Published: 2018-09-05T21:00:00.000Z
Updated: 2024-08-05T10:17:38.437Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.