« Volver al listado

CVE-2018-19031

Estado: ModificadaAlta (8.8)—

A command injection vulnerability exists when the authorized user passes crafted parameter to background process in the router. This affects 360 router series products (360 Safe Router P0,P1,P2,P3,P4), the affected version is V2.0.61.58897.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (5)

360 — Safe Router P0 Firmware360 — Safe Router P1 Firmware360 — Safe Router P2 Firmware360 — Safe Router P3 Firmware360 — Safe Router P4 Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2018-19031",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@360.cn",
      "affectedData": [
        {
          "vendor": "360 Security Technology, Inc.",
          "product": "360 Safe Router",
          "versions": [
            {
              "status": "affected",
              "version": "V2.0.61.58897"
            }
          ]
        }
      ]
    }
  ],
  "published": "2019-11-04T15:15:11.287",
  "references": [
    {
      "url": "https://security.360.cn/News/news/id/188.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security@360.cn"
    },
    {
      "url": "https://security.360.cn/News/news/id/188.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-77"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A command injection vulnerability exists when the authorized user passes crafted parameter to background process in the router. This affects 360 router series products (360 Safe Router P0,P1,P2,P3,P4), the affected version is V2.0.61.58897."
    },
    {
      "lang": "es",
      "value": "Se presenta una vulnerabilidad de inyección de comando cuando el usuario autorizado pasa el parámetro diseñado hacia el proceso en segundo plano en el enrutador. Esto afecta a los productos de la serie de enrutadores 360 (360 Safe Router P0, P1, P2, P3, P4), la versión afectada es V2.0.61.58897."
    }
  ],
  "lastModified": "2026-06-17T01:48:39.957",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:360:safe_router_p0_firmware:2.0.61.58897:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8EC971CA-6B4B-444F-9A14-312F4E056025"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:360:safe_router_p0:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "35113D47-CDB8-4612-BC3E-A83A0DA95372"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:360:safe_router_p1_firmware:2.0.61.58897:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1A571AED-753F-434A-A930-AFBA375D1F40"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:360:safe_router_p1:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "3700FDF1-53F1-4E76-87BA-92902DBCB8E1"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:360:safe_router_p2_firmware:2.0.61.58897:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "15B02088-2652-40BC-97DB-7AFCEF8EF6D1"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:360:safe_router_p2:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "EB8C3A6B-110D-40CF-BFFA-4B3FD66D450C"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:360:safe_router_p3_firmware:2.0.61.58897:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "17AF3DAC-0C0E-441C-A77D-830705E57696"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:360:safe_router_p3:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "937F78E0-FDE5-4068-B8B6-59C1F188AC73"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:360:safe_router_p4_firmware:2.0.61.58897:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7868460C-9A32-4BB3-9552-18D589729A96"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:360:safe_router_p4:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "60EDE287-E3E3-43E3-BEA1-89A18624807A"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "security@360.cn"
}