CVE-2020-14097

Wrong nginx configuration, causing specific paths to be downloaded without authorization. This affects Xiaomi router AX6 ROM version 1.0.18...

CVE-2020-14097

CVE-2020-14097 involves a misconfigured nginx setup on the Xiaomi Router AX6, affecting ROM versions earlier than 1.0.18. The root cause is a wrong nginx configuration that allows certain paths to be downloaded without authorization. This leads to potential unauthorized access to restricted resou...