EUVD-2020-6278

Malware in sbrugna...

CVE-2020-14119

There is command injection in the addMeshNode interface of xqnetwork.lua, which leads to command execution under administrator authority on Xiaomi router AX3600 with rom versionrom 1.1.12...

CVE-2020-14119

There is command injection in the addMeshNode interface of xqnetwork.lua, which leads to command execution under administrator authority on Xiaomi router AX3600 with rom versionrom 1.1.12...

Command injection

There is command injection in the addMeshNode interface of xqnetwork.lua, which leads to command execution under administrator authority on Xiaomi router AX3600 with rom versionrom 1.1.12...

CVE-2020-14119

There is command injection in the addMeshNode interface of xqnetwork.lua, which leads to command execution under administrator authority on Xiaomi router AX3600 with rom versionrom 1.1.12...

CVE-2020-14119

CVE-2020-14119 concerns a command‑injection vulnerability in Xiaomi AX3600 routers. The flaw is in the xqnetwork.lua “addMeshNode” interface, caused by insufficient parameter validation, allowing an attacker to execute commands with administrator privileges. Affected device: AX3600 with ROM versi...