Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2020-14094

In Xiaomi router R3600, ROM version<1.0.20, the connection service can be injected through the web interface, resulting in stack overflow or remote code execution.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Xiaomi

Description

In Xiaomi router R3600, ROM version<1.0.20, the connection service can be injected through the web interface, resulting in stack overflow or remote code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Xiaomi Xiaomi router R3600

  • ROM version<1.0.20affected

References