CVE-2020-14109

Xiaomi AX3600 router firmware versions up to 1.1.12 are affected by CVE-2020-14109 due to a command injection in the meshd process of the routing subsystem, allowing an attacker to execute commands with administrator privileges. The issue, described across multiple sources (NVD, CNVD, Red Hat, et...

CVE-2020-14119: Improper Neutralization of Special Elements used in a Command

There is command injection in the addMeshNode interface of xqnetwork.lua, which leads to command execution under administrator authority on Xiaomi router AX3600 with rom versionrom 1.1.12...

CVE-2020-14124: Buffer Copy without Checking Size of Input

There is a buffer overflow in librsa.so called by getwifipwdurl interface, resulting in code execution on Xiaomi router AX3600 with ROM version =rom 1.1.12...

CVE-2020-14109: Improper Neutralization of Special Elements used in a Command

There is command injection in the meshd program in the routing system, resulting in command execution under administrator authority on Xiaomi router AX3600 with ROM version = 1.1.12...

Xiaomi router AX3600 缓冲区错误漏洞

Xiaomi AX3600 is a router. Xiaomi AX3600 is vulnerable to a buffer error vulnerability that exists in librsa.so called by the getWifiPwdUrl interface. An attacker could exploit the vulnerability to execute code...

Xiaomi router AX3600 命令注入漏洞

Xiaomi AX3600 is a router.A security vulnerability exists in Xiaomi AX3600 firmware version 1.1.12 and earlier, which stems from a command injection in the meshd program in the routing system. An attacker could exploit this vulnerability to execute commands with administrator privileges...

CVE-2020-14104

A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50...

CVE-2020-14104

A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50...

Race condition

A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50...

CVE-2020-14104

CVE-2020-14104 concerns a race condition in the XQBACKUP component of the Xiaomi router AX3600 running ROM 1.0.50, causing a decompression path error. The issue is documented across multiple sources as affecting the AX3600 with ROM 1.0.50, and it originates from a race condition in XQBACKUP. The ...

CVE-2020-14104

A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50...

CVE-2020-14104: Concurrent Execution using Shared Resource with Improper Synchronization

A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50...

Xiaomi Xiaomi router AX3600 竞争条件问题漏洞

Xiaomi router AX3600 is a router from China-based Xiaomi. A security vulnerability exists in the Xiaomi router AX3600 ROM version 1.0.50, which originates from a decompression path error...