Vulnerability · Published Sep 16, 2021 · Assigned by Xiaomi
CVE-2020-14109
High 7.2
In plain English
A high-severity security flaw in Xiaomi Router AX3600. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.2% (higher than 82% of all known vulnerabilities).
Severity (CVSS NVD)7.2High
Exploit odds (30 days)2.2%top 17.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
There is command injection in the meshd program in the routing system, resulting in command execution under administrator authority on Xiaomi router AX3600 with ROM version =< 1.1.12
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Xiaomi Router AX3600 | Xiaomi Router AX1800 rom version < 1.1.12 |