CVE-2020-14094

2020-06-2415:51:22

Xiaomi

www.cve.org

AI Score

Confidence

High

EPSS

0.01

Percentile

84.1%

JSON

In Xiaomi router R3600, ROM version<1.0.20, the connection service can be injected through the web interface, resulting in stack overflow or remote code execution.

CNA Affected

[
  {
    "product": "Xiaomi router R3600",
    "vendor": "Xiaomi",
    "versions": [
      {
        "status": "affected",
        "version": "ROM version<1.0.20"
      }
    ]
  }
]