CVE:CVE-2018-20523
CNNVD:CNNVD-201906-300
Xiaomi Redmi Note 5 Pro是中国小米科技（Xiaomi）公司的一款智能手机。Xiaomi Stock Browser是其中的一个股票浏览器。
Xiaomi Redmi Note 5 Pro中的Xiaomi Stock Browser 10.2.4.g版本中存在命令注入漏洞。该漏洞源于外部输入数据构造可执行命令过程中，网络系统或产品未正确过滤其中的特殊元素。攻击者可利用该漏洞执行非法命令。
solution:Upgrade mi stock_browser to a higher version than 10.2.4g,and avoid the version 10.2.4g; Upgrade mi redmi_7_firmware to a higher version than -; Upgrade mi redmi_note_7_firmware to a higher version than -; Upgrade mi redmi_note_6_pro_firmware to a higher version than -; Upgrade mi redmi_6_firmware to a higher version than -; Upgrade mi redmi_6a_firmware to a higher version than -; Upgrade mi redmi_s2_firmware to a higher version than -; Upgrade mi redmi_note_5_pro_firmware to a higher version than -; Upgrade mi redmi_k20_pro_firmware to a higher version than -; Upgrade mi redmi_k20_firmware to a higher version than -; Upgrade mi redmi_7a_firmware to a higher version than -; Upgrade mi redmi_go_firmware to a higher version than -; Upgrade mi redmi_note_5_firmware to a higher version than -; Upgrade mi redmi_y3_firmware to a higher version than -; Upgrade mi redmi_note_7s_firmware to a higher version than -; Upgrade mi redmi_4a_firmware to a higher version than -; Upgrade mi redmi_note_4_firmware to a higher version than -; Upgrade mi redmi_5_plus_firmware to a higher version than -; Upgrade mi redmi_note_5a_prime_firmware to a higher version than -