CVE-2020-14097: Mi Redmi AX6 Firmware

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Wrong nginx configuration, causing specific paths to be downloaded without authorization. This affects Xiaomi router AX6 ROM version < 1.0.18.

Affected products

• Mi Redmi AX6 Firmware: before 1.0.18 (fixed in 1.0.18)

Published 2021-01-13. Last modified 2026-06-17.