Not rated
CVE-2020-14119 There is command injection in the addMeshNode interface of xqnetwork.lua, which leads to command execution under…
Description
There is command injection in the addMeshNode interface of xqnetwork.lua, which leads to command execution under administrator authority on Xiaomi router AX3600 with rom versionrom< 1.1.12
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Xiaomi Router AX3600 | Versions not published |
Other CVEs of Xiaomi Router AX3600
The 5 CVEs of Xiaomi Router AX3600 →
CVE-2020-14115
A command injection vulnerability exists in the Xiaomi Router AX3600
Not rated
CVE-2020-14124
There is a buffer overflow in librsa.so called by getwifipwdurl interface, resulting in code execution on Xiaomi…
Not rated
CVE-2020-14109
There is command injection in the meshd program in the routing system, resulting in command execution under…
Not rated
CVE-2020-14104
A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50
Not rated