PT-2022-8548 · Xiaomi · Xiaomi Router Ax6000

Published 2022-03-07 · Updated 2022-03-12 · CVE-2020-14112

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Xiaomi Router AX6000 (affected versions not specified)

Description The issue is caused by incorrect routing configuration, allowing attackers to exploit it and download part of the files in the Xiaomi Router AX6000.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2020-14112

Affected Products

Xiaomi Router Ax6000

References · 5

• https://osv.dev/vulnerability/CVE-2020-14112 · Vendor Advisory
• https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=34 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-14112 · Security Note
• https://t.me/cibsecurity/38654 · Telegram Post
• https://t.me/cvenotify/28043 · Telegram Post