CVE-2020-14104: Race Condition
Published Apr 8, 2021
·Updated
A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50.
Affected Software
2 affected components
Mi Ax3600 Firmware<=1.0.50
Mi AX3600
Event History
Apr 8, 2021
CVE Published
via MITRE·05:44 PM
Data Sourced
via MITRE·05:44 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2020-14104?
CVE-2020-14104 is a vulnerability that causes a decompression path error on Xiaomi router AX3600 with ROM version 1.0.50 due to a race condition on XQBACKUP.
2
What software is affected by CVE-2020-14104?
The Mi Ax3600 Firmware with ROM version 1.0.50 is affected by CVE-2020-14104.
3
What is the severity of CVE-2020-14104?
CVE-2020-14104 has a severity rating of 8.1 (high).
4
How can I fix CVE-2020-14104?
To fix CVE-2020-14104, update the firmware on your Xiaomi router AX3600 to a version that is not affected by this vulnerability.
5
Where can I find more information about CVE-2020-14104?
You can find more information about CVE-2020-14104 on the Xiaomi website under the vulnerability announcement with ID 26.