CVE-2020-14124 – There is a buffer overflow in librsa.so called by getwifipwdurl interface

4 years ago

There is a buffer overflow in librsa.so called by getwifipwdurl interface, resulting in code execution on Xiaomi router AX3600 with ROM version =rom< 1.1.12. Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14124 Reference (s):

https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=17
URL: https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=17