What is CVE-2020-14112?

CVE-2020-14112 is a medium-severity vulnerability in Mi Ax6000, classified under Information Disclosure. CVSS score: 5.3/10. Published 2022-03-10.

How severe is CVE-2020-14112?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Information disclosure in Mi Ax6000

CVE-2020-14112

Information Leak Vulnerability exists in the Xiaomi Router AX6000. The vulnerability is caused by incorrect routing configuration. Attackers can exploit this vulnerability to download part of the files in Xiaomi Router AX6000.

Vulnerability class: Information Disclosure

EPSS: 0.008 (52.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Mi Ax6000
Mi Ax6000_firmware
N/a Router Ax6000 — versions Router AX6000 version <1.0.56

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

security@xiaomi.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-14112?: CVE-2020-14112 is a medium-severity vulnerability in Mi Ax6000, classified under Information Disclosure. CVSS score: 5.3/10. Published 2022-03-10.
How severe is CVE-2020-14112?: Medium severity. CVSS v3 base score is 5.3 out of 10.