High severity7.2NVD Advisory· Published Sep 16, 2021· Updated Jun 17, 2026

CVE-2020-14109

Description

There is command injection in the meshd program in the routing system, resulting in command execution under administrator authority on Xiaomi router AX3600 with ROM version =< 1.1.12

Affected products

Mi/Ax3600 Firmware
cpe:2.3:o:mi:ax3600_firmware:*:*:*:*:*:*:*:*
Range: <=1.1.12
Xiaomi/Router AX3600cpe-rescue
Xiaomi/AX3600llm-fuzzy
Range: <=1.1.12

Patches

Vulnerability mechanics

References

privacy.mi.com/trustnvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000