PT-2021-9696
CVE-2020-14109
·
Published
2021-09-16
·
Updated
2021-09-27
Description by
CVSS 2.0
9.0
HighMetricsAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Xiaomi router AX3600 versions <= 1.1.12
Description
The issue is related to command injection in the meshd program within the routing system. This results in the execution of commands under administrator authority.
Recommendations
For versions <= 1.1.12, update to a version greater than 1.1.12 to resolve the issue. As a temporary workaround, consider restricting access to the meshd program to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾