CVE-2020-14115: Mi AX3600 Firmware

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

A command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused by a lack of inspection for incoming data detection. Attackers can exploit this vulnerability to execute code.

Affected products

• Mi AX3600 Firmware: before 1.0.67 (fixed in 1.0.67)

Published 2022-03-10. Last modified 2026-06-17.