CVE-2020-14110

AX3600 router sensitive information leaked.There is an unauthorized interface through luci to obtain sensitive information and log in to the web background...

Information disclosure

AX3600 router sensitive information leaked.There is an unauthorized interface through luci to obtain sensitive information and log in to the web background...

CVE-2020-14110

CVE-2020-14110 affects the Xiaomi AX3600 router. The provided data indicates a vulnerability in which an unauthorized interface via Luci can be used to obtain sensitive information and log in to the web backend. The NVD CVSS v3.1 vector shows LOCAL attack with low complexity and privileges requir...

CVE-2020-14110: Incorrect Authorization

AX3600 router sensitive information leaked.There is an unauthorized interface through luci to obtain sensitive information and log in to the web background...

AX3600路由器 安全漏洞

Xiaomi router AX3600 is a router from the Chinese company Xiaomi. A security vulnerability exists in the AX3600 router that allows unauthorized interfaces to obtain sensitive information and log into the web backend via luci...

Xiaomi AX3600 Command Injection Vulnerability (CNVD-2021-91956)

Xiaomi AX3600 is a router.A security vulnerability exists in Xiaomi AX3600 firmware version 1.1.12 and earlier, which stems from a command injection in the meshd program in the routing system. An attacker could exploit this vulnerability to execute commands with administrator privileges...

Xiaomi AX3600 Buffer Overflow Vulnerability

Xiaomi AX3600 is a router. Xiaomi AX3600 is vulnerable to a buffer error vulnerability that exists in librsa.so called by the getWifiPwdUrl interface. An attacker could exploit the vulnerability to execute code...

Xiaomi AX3600 Command Injection Vulnerability

Xiaomi AX3600 is a router.A command injection vulnerability exists in the xqnetwork.lua addMeshNode interface, which is caused by insufficient parameter validation. An attacker could use this vulnerability to inject commands to execute with administrator privileges...

CVE-2020-14119

There is command injection in the addMeshNode interface of xqnetwork.lua, which leads to command execution under administrator authority on Xiaomi router AX3600 with rom versionrom 1.1.12...

CVE-2020-14124

There is a buffer overflow in librsa.so called by getwifipwdurl interface, resulting in code execution on Xiaomi router AX3600 with ROM version =rom 1.1.12...

CVE-2020-14119

There is command injection in the addMeshNode interface of xqnetwork.lua, which leads to command execution under administrator authority on Xiaomi router AX3600 with rom versionrom 1.1.12...

CVE-2020-14124

There is a buffer overflow in librsa.so called by getwifipwdurl interface, resulting in code execution on Xiaomi router AX3600 with ROM version =rom 1.1.12...

Command injection

There is command injection in the addMeshNode interface of xqnetwork.lua, which leads to command execution under administrator authority on Xiaomi router AX3600 with rom versionrom 1.1.12...

Buffer overflow

There is a buffer overflow in librsa.so called by getwifipwdurl interface, resulting in code execution on Xiaomi router AX3600 with ROM version =rom 1.1.12...

CVE-2020-14109

There is command injection in the meshd program in the routing system, resulting in command execution under administrator authority on Xiaomi router AX3600 with ROM version = 1.1.12...

Command injection

There is command injection in the meshd program in the routing system, resulting in command execution under administrator authority on Xiaomi router AX3600 with ROM version = 1.1.12...

CVE-2020-14124

CVE-2020-14124 describes a buffer overflow in librsa.so invoked by the getwifipwdurl/getWifiPwdUrl interface on the Xiaomi AX3600 router, leading to remote code execution. Affected condition is ROM version

CVE-2020-14119

CVE-2020-14119 concerns a command‑injection vulnerability in Xiaomi AX3600 routers. The flaw is in the xqnetwork.lua “addMeshNode” interface, caused by insufficient parameter validation, allowing an attacker to execute commands with administrator privileges. Affected device: AX3600 with ROM versi...

CVE-2020-14119

There is command injection in the addMeshNode interface of xqnetwork.lua, which leads to command execution under administrator authority on Xiaomi router AX3600 with rom versionrom 1.1.12...

CVE-2020-14109

There is command injection in the meshd program in the routing system, resulting in command execution under administrator authority on Xiaomi router AX3600 with ROM version = 1.1.12...