GCVE - cpe:2.3:h:mi:ax3600:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:mi:ax3600:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Mi (`60a5be67-ae7d-588b-8dcf-30a3da19041f`)
Product	Ax3600 (`065fea65-8bed-5d61-83ef-55c5d1f35d5d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-14124`	not_vulnerable	2026-06-08 05:18:02.069182	Details available There is a buffer overflow in librsa.so called by getwifipwdurl interface, resulting in code execution on Xiaomi router AX3600 with ROM version =rom< 1.1.12. Published: 2021-09-16T12:08:45.000Z Updated: 2024-08-04T12:39:35.891Z Open on db.gcve.eu Reference links https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=17	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-14119`	not_vulnerable	2026-06-08 05:18:02.063276	Details available There is command injection in the addMeshNode interface of xqnetwork.lua, which leads to command execution under administrator authority on Xiaomi router AX3600 with rom versionrom< 1.1.12 Published: 2021-09-16T12:03:05.000Z Updated: 2024-08-04T12:39:35.985Z Open on db.gcve.eu Reference links https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=16	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-14115`	not_vulnerable	2026-06-08 05:18:02.052468	Details available A command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused by a lack of inspection for incoming data detection. Attackers can exploit this vulnerability to execute code. Published: 2022-03-07T15:33:20.000Z Updated: 2024-08-04T12:39:35.895Z Open on db.gcve.eu Reference links https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=37	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-14111`	not_vulnerable	2026-06-08 05:18:02.047386	Details available A command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused by a lack of inspection for incoming data detection. Attackers can exploit this vulnerability to execute code. Published: 2022-03-07T15:24:50.000Z Updated: 2024-08-04T12:39:36.102Z Open on db.gcve.eu Reference links https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=18	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-14110`	not_vulnerable	2026-06-08 05:18:02.046039	Details available AX3600 router sensitive information leaked.There is an unauthorized interface through luci to obtain sensitive information and log in to the web background. Published: 2022-01-18T16:51:43.000Z Updated: 2024-08-04T12:39:36.192Z Open on db.gcve.eu Reference links https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=40	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-14109`	not_vulnerable	2026-06-08 05:18:02.044463	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-14104`	not_vulnerable	2026-06-08 05:18:02.040173	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.