Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2020-14119

There is command injection in the addMeshNode interface of xqnetwork.lua, which leads to command execution under administrator authority on Xiaomi router AX3600 with rom versionrom

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Xiaomi

Description

There is command injection in the addMeshNode interface of xqnetwork.lua, which leads to command execution under administrator authority on Xiaomi router AX3600 with rom versionrom< 1.1.12

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a Xiaomi Router AX3600

  • Xiaomi RouterAX3600 rom versionrom< 1.1.12affected

References