The vulnerability of the set_WAN6 interface in Xiaomi R3600 router software allows a attacker to execute arbitrary code on the target system.

The vulnerability of the setWAN6 interface in Xiaomi R3600 router microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code on the target system by sending specially crafted network packets...

CVE-2020-14100

In Xiaomi router R3600 ROM version1.0.66, filters in the setWAN6 interface can be bypassed, causing remote code execution. The router administrator can gain root access from this vulnerability...