Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2020-14102

There is command injection when ddns processes the hostname, which causes the administrator user to obtain the root privilege of the router. This affects Xiaomi router AX1800rom ve

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Xiaomi

Description

There is command injection when ddns processes the hostname, which causes the administrator user to obtain the root privilege of the router. This affects Xiaomi router AX1800rom version < 1.0.336 and Xiaomi route RM1800 root version < 1.0.26.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a Xiaomi router AX1800

  • Xiaomi router AX1800rom version < 1.0.336affected

n/a Xiaomi route RM1800

  • Xiaomi route RM1800 root version < 1.0.26affected

References