CVE-2020-14111: Mi AX3600 Firmware

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused by a lack of inspection for incoming data detection. Attackers can exploit this vulnerability to execute code.

Affected products

• Mi AX3600 Firmware: before 1.1.15 (fixed in 1.1.15)

Published 2022-03-10. Last modified 2026-06-17.