Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: Mi Component: Ax3600 Firmware Clear all filters
TI-2020-11051 CVE-2020-14110 · GHSA-g78x-p68x-vx34

Incorrect authorization in miwifi6 AX3600

Priority LOW 34

AX3600 router sensitive information leaked.There is an unauthorized interface through luci to obtain sensitive information and log in to the web background.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00247 Published 2022-01-18 No fix listed CWE-863
TI-2020-11064 CVE-2020-14124 · GHSA-3367-6xxj-j9cg

Buffer overflow in Xiaomi Router AX3600

Priority MEDIUM 46

There is a buffer overflow in librsa.so called by getwifipwdurl interface, resulting in code execution on Xiaomi router AX3600 with ROM version =rom< 1.1.12.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01751 Published 2021-09-16 No fix listed CWE-120
TI-2020-11050 CVE-2020-14109 · GHSA-r8rx-jmjw-9g68

Command injection in Xiaomi Router AX3600

Priority LOW 36

There is command injection in the meshd program in the routing system, resulting in command execution under administrator authority on Xiaomi router AX3600 with ROM version =< 1.1.12

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02165 Published 2021-09-16 No fix listed CWE-77