VYPR
Unrated severityNVD Advisory· Published Jun 24, 2020· Updated Aug 4, 2024

CVE-2020-11960

CVE-2020-11960

Description

Xiaomi router R3600 ROM before 1.0.50 is affected by a vulnerability when checking backup file in c_upload interface let attacker able to extract malicious file under any location in /tmp, lead to possible RCE and DoS

Affected products

2
  • Xiaomi/router R3600 ROMdescription
  • Xiaomi/R3600llm-fuzzy
    Range: <1.0.50

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.