Critical severity9.8NVD Advisory· Published Sep 11, 2020· Updated Jun 17, 2026

CVE-2020-14100

Description

In Xiaomi router R3600 ROM version<1.0.66, filters in the set_WAN6 interface can be bypassed, causing remote code execution. The router administrator can gain root access from this vulnerability.

Affected products

Mi/R3600 Firmware
cpe:2.3:o:mi:r3600_firmware:*:*:*:*:*:*:*:*
Range: <1.0.66
Xiaomi/Router AX3600cpe-rescue
Xiaomi/R3600llm-fuzzy
Range: <1.0.66

Patches

Vulnerability mechanics

References

privacy.mi.com/trustnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000