955 matches found
Xiaomi Router AX6000 信息泄露漏洞
Xiaomi Router AX6000 is a router from Xiaomi China. Xiaomi Router AX6000 1.0.56 previously had an information disclosure vulnerability that stemmed from a routing configuration error, which could be exploited by an attacker to download some of the files in Xiaomi Router AX6000...
CVE-2020-14115
A command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused by a lack of inspection for incoming data detection. Attackers can exploit this vulnerability to execute code...
CVE-2020-14115
Summary: The Xiaomi Router AX3600 contains a command-injection vulnerability caused by insufficient input validation of incoming data, allowing remote code execution over the network without authentication (per CVSS: Network, No privileges, No user interaction; Impact: High). The issue affects fi...
CVE-2020-14111
The Xiaomi Router AX3600 is affected by a command injection vulnerability caused by insufficient input validation. Exploitation could allow an attacker to execute arbitrary code on the device. Affected versions include prior to 1.1.15; remediation is to update to 1.1.15 or later as indicated by C...
CVE-2020-14111
A command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused by a lack of inspection for incoming data detection. Attackers can exploit this vulnerability to execute code...
CVE-2020-14112
Information Leak Vulnerability exists in the Xiaomi Router AX6000. The vulnerability is caused by incorrect routing configuration. Attackers can exploit this vulnerability to download part of the files in Xiaomi Router AX6000...
CVE-2020-14112
CVE-2020-14112 affects Xiaomi Router AX6000, with reported information-disclosure vulnerability linked to a routing-configuration error. CNVD/CNNVD notes AX6000 firmware 1.0.56 previously exposed the flaw, enabling an attacker to download parts of router files. The Red Hat/PRION entries reiterate...
AX3600路由器 安全漏洞
Xiaomi router AX3600 is a router from the Chinese company Xiaomi. A security vulnerability exists in the AX3600 router that allows unauthorized interfaces to obtain sensitive information and log into the web backend via luci...
小米投屏 缓冲区错误漏洞
Xiaomi Xiaomi Screen Throw is a Chinese Xiaomi Technology Xiaomi company's offers a screen throw function. A security vulnerability exists in the Xiaomi Screen Throw http service, which could cause the application to crash on a LAN...
Xiaomi AX3600 Command Injection Vulnerability (CNVD-2021-91956)
Xiaomi AX3600 is a router.A security vulnerability exists in Xiaomi AX3600 firmware version 1.1.12 and earlier, which stems from a command injection in the meshd program in the routing system. An attacker could exploit this vulnerability to execute commands with administrator privileges...
Xiaomi community licensing issue vulnerability
Xiaomi Community, an official user community application of Xiaomi, China, is vulnerable to an authorization issue in versions prior to 3.0.210809, which stems from the exposure of some js interfaces. An attacker could use this vulnerability to maliciously invoke sensitive functions...
Xiaomi AX3600 Buffer Overflow Vulnerability
Xiaomi AX3600 is a router. Xiaomi AX3600 is vulnerable to a buffer error vulnerability that exists in librsa.so called by the getWifiPwdUrl interface. An attacker could exploit the vulnerability to execute code...
Xiaomi AX3600 Command Injection Vulnerability
Xiaomi AX3600 is a router.A command injection vulnerability exists in the xqnetwork.lua addMeshNode interface, which is caused by insufficient parameter validation. An attacker could use this vulnerability to inject commands to execute with administrator privileges...
CVE-2020-14124
There is a buffer overflow in librsa.so called by getwifipwdurl interface, resulting in code execution on Xiaomi router AX3600 with ROM version =rom 1.1.12...
CVE-2020-14119
There is command injection in the addMeshNode interface of xqnetwork.lua, which leads to command execution under administrator authority on Xiaomi router AX3600 with rom versionrom 1.1.12...
CVE-2020-14119
There is command injection in the addMeshNode interface of xqnetwork.lua, which leads to command execution under administrator authority on Xiaomi router AX3600 with rom versionrom 1.1.12...
CVE-2020-14124
There is a buffer overflow in librsa.so called by getwifipwdurl interface, resulting in code execution on Xiaomi router AX3600 with ROM version =rom 1.1.12...
Command injection
There is command injection in the addMeshNode interface of xqnetwork.lua, which leads to command execution under administrator authority on Xiaomi router AX3600 with rom versionrom 1.1.12...