Non notée
CVE-2020-14119 There is command injection in the addMeshNode interface of xqnetwork.lua, which leads to command execution under…
Description
There is command injection in the addMeshNode interface of xqnetwork.lua, which leads to command execution under administrator authority on Xiaomi router AX3600 with rom versionrom< 1.1.12
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Xiaomi Router AX3600 | Versions non publiées |
Autres CVE de Xiaomi Router AX3600
Les 5 CVE de Xiaomi Router AX3600 →
CVE-2020-14115
A command injection vulnerability exists in the Xiaomi Router AX3600
Non notée
CVE-2020-14124
There is a buffer overflow in librsa.so called by getwifipwdurl interface, resulting in code execution on Xiaomi…
Non notée
CVE-2020-14109
There is command injection in the meshd program in the routing system, resulting in command execution under…
Non notée
CVE-2020-14104
A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50
Non notée