CVE-2020-14111

2022-03-0715:24:50

Xiaomi

www.cve.org

xiaomi router ax3600

command injection

vulnerability

code execution

EPSS

Percentile

12.6%

JSON

A command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused by a lack of inspection for incoming data detection. Attackers can exploit this vulnerability to execute code.

CNA Affected

[
  {
    "product": "Xiaomi Router Router AX3600",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Xiaomi Router AX3600 version <1.1.15"
      }
    ]
  }
]

References

trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=18

EPSS

Percentile

12.6%

JSON

Related for CVELIST:CVE-2020-14111