PT-2024-27702 · Xiaomi · Redmi Router Rb03

Ke Xu + 4 · Published 2024-06-17 · Updated 2024-11-22 · CVE-2024-37663

Positive Technologies (AI Summary)

CVSS v3.1

4.1

Medium

Base vector

AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Redmi router RB03 version 1.0.57

Description The issue allows an attacker in the same WLAN as the victim to hijack traffic between the victim and any remote server by sending forged ICMP redirect messages. This can be exploited by an attacker in the same wireless network.

Recommendations For Redmi router RB03 version 1.0.57, update to a newer version that contains a fix for this issue. As a temporary workaround, consider restricting access to the network to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-940

Related Identifiers

CVE-2024-37663

Affected Products

Redmi Router Rb03

References · 4

• 🔥 https://github.com/ouuan/router-vuln-report/blob/master/icmp-redirect/redmi-rb03-redirect.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-37663 · Security Note
• https://osv.dev/vulnerability/CVE-2024-37663 · Vendor Advisory
• https://t.me/cvenotify/102362 · Telegram Post