← All advisories

High severity7.5NVD Advisory· Published Jan 13, 2021· Updated Jun 17, 2026

CVE-2020-14097

CVE-2020-14097

Description

Wrong nginx configuration, causing specific paths to be downloaded without authorization. This affects Xiaomi router AX6 ROM version < 1.0.18.

Affected products

3

Mi/Redmi Ax6 Firmware
cpe:2.3:o:mi:redmi_ax6_firmware:*:*:*:*:*:*:*:*
Range: <1.0.18
Xiaomi/router AX6description
Xiaomi/AX6llm-fuzzy
Range: <1.0.18

Patches

Vulnerability mechanics

References

1

privacy.mi.com/trustnvdVendor Advisory

News mentions

0

No linked articles in our index yet.

CVE-2020-14097 · High · VYPR