CVE-2020-14124 – There is a buffer overflow in librsa.so called by getwifipwdurl interface

There is a buffer overflow in librsa.so called by getwifipwdurl interface, resulting in code execution on Xiaomi router AX3600 with ROM version =rom< 1.1.12.   Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14124 Reference (s):

• https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=17
• URL: https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=17