CVE-2020-14119

CVE-2020-14119 concerns a command‑injection vulnerability in Xiaomi AX3600 routers. The flaw is in the xqnetwork.lua “addMeshNode” interface, caused by insufficient parameter validation, allowing an attacker to execute commands with administrator privileges. Affected device: AX3600 with ROM versi...