CVE-2020-14124

There is a buffer overflow in librsa.so called by getwifipwdurl interface, resulting in code execution on Xiaomi router AX3600 with ROM version =rom< 1.1.12.

Score

CVSS 3.1 9.8 Critical

Status

Modified - security@xiaomi.com

Published

2021-09-16

Last modified

2024-08-04

Weaknesses

CWE-120

Affected products

• Ax3600 Firmware (Mi)

References

• https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=17