An unsafe configuration of nginx lead to information leak in Xiaomi router R3600 ROM before 1.0.50.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11959
Reference (s):
- https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=14