Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3007▼ 67 respecto a la semana anterior

Críticas / altas1403▲ 50 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)390▼ 120 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2020-14115	Modificada	Crítica (9.8)	1.1%	—	MI Ax3600 Firmware	10/3/2022	17/6/2026	A command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused by a lack of inspection for incoming data detection. Attackers can exploit this vulnerability to execute code.
CVE-2020-14111	Modificada	Alta (7.8)	0.32%	—	MI Ax3600 Firmware	10/3/2022	17/6/2026	A command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused by a lack of inspection for incoming data detection. Attackers can exploit this vulnerability to execute code.
CVE-2020-14110	Modificada	Alta (7.8)	0.25%	—	MI Ax3600 Firmware	18/1/2022	17/6/2026	AX3600 router sensitive information leaked.There is an unauthorized interface through luci to obtain sensitive information and log in to the web background.
CVE-2020-14124	Modificada	Crítica (9.8)	1.8%	—	MI Ax3600 Firmware	16/9/2021	17/6/2026	There is a buffer overflow in librsa.so called by getwifipwdurl interface, resulting in code execution on Xiaomi router AX3600 with ROM version =rom< 1.1.12.
CVE-2020-14109	Modificada	Alta (7.2)	2.2%	—	MI Ax3600 Firmware	16/9/2021	17/6/2026	There is command injection in the meshd program in the routing system, resulting in command execution under administrator authority on Xiaomi router AX3600 with ROM version =< 1.1.12
CVE-2020-14104	Modificada	Alta (8.1)	0.66%	—	MI Ax3600 Firmware	8/4/2021	17/6/2026	A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50.