EUVD-2020-6256

Malware in sbrugna...

CVE-2020-14097

Wrong nginx configuration, causing specific paths to be downloaded without authorization. This affects Xiaomi router AX6 ROM version 1.0.18...

Authorization

Wrong nginx configuration, causing specific paths to be downloaded without authorization. This affects Xiaomi router AX6 ROM version 1.0.18...

CVE-2020-14097

CVE-2020-14097 involves a misconfigured nginx setup on the Xiaomi Router AX6, affecting ROM versions earlier than 1.0.18. The root cause is a wrong nginx configuration that allows certain paths to be downloaded without authorization. This leads to potential unauthorized access to restricted resou...