Critical severity9.8NVD Advisory· Published Jun 24, 2020· Updated Jun 17, 2026

CVE-2020-14094

Description

In Xiaomi router R3600, ROM version<1.0.20, the connection service can be injected through the web interface, resulting in stack overflow or remote code execution.

Affected products

Mi/Xiaomi R3600 Firmware
cpe:2.3:o:mi:xiaomi_r3600_firmware:*:*:*:*:*:*:*:*
Range: <1.0.20
Xiaomi/R3600llm-fuzzy
Range: <1.0.20
Xiaomi/Xiaomi routerscpe-rescue
Range: ROM version<1.0.20

Patches

Vulnerability mechanics

References

privacy.mi.com/trustnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000