Vulnerability · Published Mar 7, 2022 · Assigned by Xiaomi
CVE-2020-14111
High 7.8
In plain English
A high-severity security flaw in Xiaomi Router Router AX3600. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).
Severity (CVSS NVD)7.8High
Exploit odds (30 days)0.3%top 74.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused by a lack of inspection for incoming data detection. Attackers can exploit this vulnerability to execute code.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Xiaomi Router Router AX3600 | Xiaomi Router AX3600 version <1.1.15 |
References
- https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=18 x_refsource_MISC